SMP Gateway User Manual

User Manual
SMP Gateway
Copyright Cooper Power Systems 2007, hardware, software and manual The information in this document applies to software version 4.0 or later and is subject to change without notice.
Cooper Power Systems

Energy Automation Solutions 730 Commerciale St. Suite 200 Saint-Jean-Chrysostome (Quebec) Canada G6Z 2C5 Phone: (418) 834-0009 Fax: (514) 227-5256 Email: information@cybectec.com Web Site: http://www.cybectec.com
GUI-00316-00001 T, version 16
Contents
Welcome 1
SMP models.........................................................................................................................1 Related documentation ........................................................................................................2 Getting assistance with our products ...................................................................................3 Getting started......................................................................................................................3 Document overview.............................................................................................................4
Principles of operation
Introduction .........................................................................................................................7 Logical architecture .............................................................................................................7 Masters and slaves.................................................................................................7 Introducing the SMP in the automation system.....................................................8 SMP internals ........................................................................................................8 Communication components ...............................................................................10 Configuring the SMP.........................................................................................................11 Step 1 The transparent SMP .............................................................................12 Using the SMP as a protocol translator ...............................................................14 Using the SMP as a data concentrator or device multiplexer ..............................15 Using the SMP as a communications gateway ....................................................16 Putting it all together ...........................................................................................17 Securing the substation........................................................................................17
The SMP Tools SMP Manager
19 21
Starting SMP Manager and logging on..............................................................................21 Main window .....................................................................................................................22 Adding an SMP..................................................................................................................22 Information provided by the SMP gateway icon ...............................................................23 Customizing the display.....................................................................................................24 Adding or removing a column.............................................................................24 SMP Gateway User Manual i
Changing the position of a column......................................................................25
Configuring the SMP
27
Introduction .......................................................................................................................27 Creating master protocol instances ....................................................................................29 Creating a master protocol instance from a template ..........................................29 Creating a master protocol instance manually.....................................................30 Configuring the master protocol general settings ................................................30 Configuring the data points................................................................................................32 Adding data points from a protocol template ......................................................33 Creating a template from a master protocol instance.........................................................34 Duplicating a master protocol instance..............................................................................34 Configuring the communication links ...............................................................................35 Configuring the serial port interfaces ..................................................................35 Configuring the operation of the serial ports .......................................................36 Configuring TCP/IP connections.........................................................................37 Associating a master protocol instance with a communications link.................................38 Testing the configuration ...................................................................................................39 Validating and saving the configuration..............................................................39 Sending the configuration to the SMP gateway...................................................40 Retrieving an SMP gateway configuration file....................................................40 Working with SMP Config grids .......................................................................................41 Selecting cells and lines.......................................................................................41 Duplicating a line ................................................................................................41 Copying a value to a group of cells .....................................................................41 Resequencing a group of lines.............................................................................42 Deleting an item ..................................................................................................44 Using tooltips ......................................................................................................44
Viewing the SMP log files
45
Information provided by SMP Log....................................................................................45 SMP Log features ..............................................................................................................46 Searching in SMP Log.........................................................................................46 Printing a log .......................................................................................................46 Saving a log file...................................................................................................46 Viewing multiple log folders at once...................................................................47 Changing how the time is displayed....................................................................47
ii
SMP Gateway User Manual
Viewing protocol exchanges in real time
49
Information provided by SMP Trace .................................................................................50 SMP Trace features............................................................................................................51 Searching in SMP Trace......................................................................................51 Printing a trace.....................................................................................................51 Recording a live trace..........................................................................................51 Saving all the scrolled information......................................................................52 Changing how the time is displayed....................................................................52
Viewing communication statistics in real time
53
Information provided by SMP Stats ..................................................................................54 SMP Stats features.............................................................................................................54 Resetting statistics ...............................................................................................54 Printing statistics .................................................................................................54 Changing how the time is displayed....................................................................54
Using a web browser to view data in real time
57
Applying a filter to a data point display.............................................................................58 Acknowledging data point value changes..........................................................................58
Connecting the SMP to a control center
61
Creating slave protocol instances.......................................................................................61 Configuring slave protocol instances.................................................................................61 Subscribing to the master data points ................................................................................62 Configuring the data points................................................................................................64 Configuring the communication links ...............................................................................64 Setting up a TCP/IP connection...........................................................................64 Associating a slave protocol instance with a communications link ...................................65 Validating and activating the configuration.......................................................................65 Testing the configuration ...................................................................................................65
Connecting to another SMP
67
Introduction .......................................................................................................................67 Configuring the slave SMP................................................................................................68 Configuring the master SMP .............................................................................................69
Security
72
Introduction .......................................................................................................................72 SMP Gateway User Manual iii
Meeting NERC CIP requirements .....................................................................................72 Managing the security configuration of one or more SMP gateways ................................73 Getting started .....................................................................................................73 Accessing the Login Information dialog box ......................................................74 Appropriate Use banner in the Login dialog box ................................................74 Defining your authentication policy ....................................................................75 Groups and privileges..........................................................................................77 Editing user groups and privileges ......................................................................78 Managing user groups and privileges ..................................................................79 Validating and saving the security configuration ................................................81 Sending the security configuration to one or more SMP gateways .....................81 Retrieving the security configuration of an SMP gateway ..................................83 Removing the security configuration from one or more SMP gateways .............83 Unlocking a user account ....................................................................................84 Viewing the security log......................................................................................85 File certification and integrity checking ............................................................................85 Introduction .........................................................................................................85 Detecting an integrity check failure.....................................................................85 Recovering from an integrity failure ...................................................................86 VPN connections and the SMP gateway firewall ..............................................................86 Introduction .........................................................................................................86 Customizing the firewall and VPN connections..................................................86 Connecting and disconnecting VPN when the firewall is enabled ......................90 Connecting and disconnecting VPN when the firewall is disabled .....................91 Substation network security considerations.......................................................................92 Setting up a secure substation LAN ....................................................................92 Using the SMP Tools through a substation LAN firewall...................................93 Locking incoming RAS and passthru connections ............................................................95 Locking or unlocking all incoming RAS dialup connections..............................95 Locking or unlocking a passthru connection .......................................................96
Using passthru connections
97
Introduction .......................................................................................................................97 Principles of operation .......................................................................................................98 Setting up passthru connections.........................................................................................99 Configuring SMP passthru ..................................................................................99 Installing a loopback cable, if necessary ...........................................................100
iv
Setting up a list of applications and loopback connections ...............................101 Connecting to the device..................................................................................................103 Testing the passthru connection.......................................................................................104 Deactivating the SMP passthru connection .....................................................................104
Retrieving DFRs or other event files retrieved from the devices
105
Defining the system folders .............................................................................................105 Configuring the master protocol event file processing ....................................................106
Creating an Annunciator interface
109
Introduction .....................................................................................................................109 Configuring an Annunciator in SMP Config ...................................................................110 Touch screen configuration in SMP Config ......................................................110 Creating the Annunciator ..................................................................................110 Setting General parameters................................................................................111 Setting Alarm inputs..........................................................................................112 Annunciator Pages editor.................................................................................................113 The Alarm tab....................................................................................................114 The Readings tab ...............................................................................................116 Setting cell contents...........................................................................................117 Displaying static text or colors ..........................................................................118 Displaying analog data points............................................................................119 Displaying binary data points ............................................................................121 Formatting groups of cells.................................................................................121 Selecting the display font ..................................................................................123 Connecting to the Annunciator option into the SMP gateway.........................................124 Calibrating the touch screen ............................................................................................124 Using the Annunciator Interface......................................................................................125 Navigation .........................................................................................................125 Interface displayed in all the pages....................................................................125 The Alarms page ...............................................................................................125 The Readings page ............................................................................................129 The Blocked page ..............................................................................................129 The History page ...............................................................................................130 System States page ............................................................................................131
The SMPs automation functions
133
Introduction .....................................................................................................................133 The SMP Automation Functions module ........................................................................133 Adding an Automation Functions instance........................................................134 Defining an automation function.......................................................................135 Understanding automation function settings .....................................................138 Logic Processor .................................................................................................138 The Soft PLC ...................................................................................................................145 The CoDeSys development environment ..........................................................146 Using CoDeSys to create SMP automation scripts............................................147
Using syslog with an SMP gateway
149
Introduction .....................................................................................................................149 Setting up SMP Config for syslog messages ...................................................................149
Redundancy
151
Introduction .....................................................................................................................151 Redundant group operation..............................................................................................151 Redundant IEDs ................................................................................................152 Priority...............................................................................................................153 Grouping 2 SMPs for redundancy ...................................................................................154 Introduction .......................................................................................................154 Setting up two SMPs with SMP Manager .........................................................154 The Redundancy column ...............................................................................157 Hot standby......................................................................................................................158 Managing redundancy .....................................................................................................159 Forcing an active SMP to become a standby SMP............................................159 Additional failover conditions ...........................................................................159 Modifying the redundancy settings of an existing group...................................160 Ungrouping 2 SMP gateways ............................................................................160 Testing and validating the configuration ...........................................................160 Checking the redundancy status through the front panel...................................160 Testing a redundant network .............................................................................161
Setting up the SNMP server
163
Introduction .....................................................................................................................163 SNMP traps......................................................................................................................163 Configuring the SNMP server .........................................................................................164
vi
Time synchronization
165
Setting the clock in your SMP .........................................................................................165 Concerning daylight saving time in 2007..........................................................165 Why synchronize the SMP gateway? ..............................................................................166 IRIG-B and GPS accuracy...............................................................................................167 What is SNTP? ................................................................................................................168 Setting up SNTP on the SMP gateway ............................................................................168 Monitoring the SNTP status ............................................................................................169
Remote access to the SMP gateway through a serial port
171
Windows XP setup procedures ........................................................................................171 Setting up a dial-up (modem) connection..........................................................171 Setting up a direct serial connection..................................................................174 Windows 2000 setup procedures .....................................................................................176 Setting up a dial-up (modem) connection..........................................................176 Setting up a direct serial connection..................................................................178
Using a Dial-Up Connection for DNP3 or IEC 60870-5-101
181
Specifying which serial ports have modems....................................................................182 Creating a modem pool....................................................................................................182 Adding a modem to a modem pool..................................................................................184 Adding a modem pool master connection........................................................................185 Adding a modem pool slave connection ..........................................................................185
Updating the SMP software and tools
186
Software architecture of the SMP Gateway.....................................................................186 Procedure update checklist ..............................................................................................186 Updating the SMP Tools on the PC.................................................................................187 Updating the SMP software on the SMP Gateway ..........................................................187 Updating the SMP firmware..............................................................................187 Updating the SMP gateway application ............................................................190 Updating the configuration file..........................................................................190
Activating a new license
191
Updating your license information ..................................................................................191 Updating the SMP gateway application...........................................................................193
Miscellaneous SMP Tool features

194
vii
SMP Manager features.....................................................................................................194 Setting SMP Manager options .........................................................................................194 SMP Config features........................................................................................................196 System data points ...........................................................................................................196 SMP Loader.....................................................................................................................199 Using SMP Loader ............................................................................................199 Transferring files to the SMP gateway ..............................................................202 Log file ..............................................................................................................203 Updating bootstraps under unusual circumstances............................................203
Troubleshooting
205
Introduction .....................................................................................................................205 Getting additional help ......................................................................................205 Creating an SMP gateway report file...............................................................................206 Viewing an SMP gateway report file...............................................................................207 Startup problems..............................................................................................................207 No configuration file .........................................................................................207 Protocols failed..................................................................................................208 Critical component missing ...............................................................................209 Safe mode ..........................................................................................................209 Communication problems................................................................................................209 Physical layer ....................................................................................................209 Link layer ..........................................................................................................210 Protocol layer ....................................................................................................210 Problems with data validity .............................................................................................211 Problems executing a control operation...........................................................................211
viii
Figures
Figure 1 Figure 2 Figure 3 Figure 4 Figure 5 Figure 6 Figure 7 Figure 8 Figure 9 Figure 10 Figure 11 Figure 12 Figure 13 Master and slave systems .............................................................................................8 The SMP as a Master-and-slave system .......................................................................8 The SMP real-time data exchange ................................................................................9 SMP communication components ..............................................................................10 The transparent SMP ..................................................................................................12 Additional SMP functions ..........................................................................................13 The SMP protocol translator.......................................................................................14 The SMP data concentrator ........................................................................................15 The SMP communications gateway ...........................................................................16 The SMP substation gateway......................................................................................17 The SMP substation gateway with a firewall .............................................................18 Network security ........................................................................................................92 Using a passthru connection .......................................................................................98
ix
Welcome
Congratulations on acquiring your new SMP gateway! You now have unlimited connectivity for all the equipment in your substation. In this manual, we will show you how to use the SMP to integrate existing and new RTUs, IEDs, PLCs and control centers into a single modern, homogeneous substation automation system. You will learn how to set up your SMP as a:
Protocol Translator The SMP translates standard or proprietary device protocols to control center protocols such as DNP3, TEJAS, IEC-60870-5-101/103/104 or IEC-61850 (UCA 2.0). Data Concentrator The SMP collects the data from all connected devices, regardless of protocol, and makes it available to control centers using LAN, WAN, modem or serial connections. Terminal Server The SMP supports centralized maintenance, monitoring and control of all devices by using the pass-thru communications mode. Substation Communications Gateway The advanced capabilities of the SMP make it the ideal choice for any substation automation project.
SMP models
There are currently 3 SMP models:
The SMP 4 has 4 ports. It comes in a compact and economical format that allows it to be installed directly within relay protection enclosures. There is also an optional internal modem available, which allows the SMP 4 to communicate with a SCADA or device via a dialup connection. The SMP 16, which can be mounted in a 19-inch rack, comes in two versions, both of which have the same basic characteristics:
The SMP 16/CP is a gateway that offers 16 RS-232/422/485 universal serial ports, 2 Ethernet ports and an integrated modem. The SMP 16/SG has, in addition, expansion slots where accessories and options can be added to make it an ideal communications gateway for all your automation projects. 1
Both versions can also be equipped with the PM option, a new 1.1 GHz Pentium-M processor, that improves the gateway's speed tenfold. This is ideal for high-capacity application or complex automation schemes.
The manual applies to all models, and differences are indicated where applicable. Refer to your SMP installation guide for a detailed description of your particular SMP model.
Related documentation
This manual provides you with the basic information you need to get started with your SMP gateway. To reduce paper use, we have included the following related documentation on the CDROM you received with the product. Should you want printed documents, you can order them from Cybectec using reference number P-DPRN-0102. Your Documentation folder contains the following related documents:
SMP 4-20 SMP 8-40 Installation Guide, GUI-00316-00027 T. This document gives you detailed instructions on installing and setting up the SMP 4-20 or SMP 8-40. SMP 4 Installation Guide, GUI-00316-00026 T. This document gives you detailed instructions on installing and setting up the SMP 4. SMP 16 Installation Guide, GUI-00316-00032 T. This document gives you detailed instructions on installing and setting up the SMP 16/CP or the SMP 16/SG. SIOM Adding Serial Ports to Your SMP, AUT-00123-00432 T. This document describes how to add serial ports to an SMP 4-20 or SMP 8-40. SMP 16 GPS Clock Option Installation Guide AUT-00316-0047-T. This document describes how to install the wiring and setup the software if you have the GPS clock option for the SMP 16. Master Protocol Common Concepts. This document describes the concepts and settings common to the protocols used by most substation devices. Separate documents describe the protocol-specific settings. SMP 4 Diagnostics Reference Guide, GUI-00316-00040 T. This document takes you through the steps required to run diagnostic tests on the SMP 4. SMP 16 Diagnostics Reference Guide, GUI-00316-00036 T. This document takes you through the steps required to run diagnostic tests on the SMP 16. SMP 4-20 SMP 8-40 Diagnostics Reference Guide, GUI-00316-00024 T. This document takes you through the steps required to run diagnostic tests on the SMP 4-20 or SMP 8-40.
Getting assistance with our products

If you have any questions regarding the performance, application, testing or repair of this or any other component of the Cybectec product line, do not hesitate to contact us. Our staff will be happy to assist you. Cybectec Technical Support Cooper Power Systems Energy Automation Solutions 730 Commerciale Street, Suite 200 Saint-Jean-Chrysostome, Quebec Canada G6Z 2C5 Email: support@cybectec.com Phone: (418) 834-0009 Fax: (514) 227-5256 For emergency service on weekends and holidays, you can reach us between 8 a.m. and 5 p.m. EST. Simply leave your name and phone number on our pager at (418) 260-6000, and we will get back to you as soon as possible.
Getting started
When you receive your SMP, you have to go through several steps before you can perform the tasks described in this document. Namely, you have to do the following:

Unpack the SMP. Install the SMP. Set-up the SMP. Install the PC software. Make the SMP Tools aware of your new SMP gateway. Load the SMP firmware.
All of these steps are explained in detail in the following documents:

SMP 4-20 SMP 8-40 Installation Guide, GUI-00316-00027 T SMP 4 Installation Guide, GUI-00316-00026 T. SMP 16 Installation Guide, GUI-00316-00032 T.
Make sure you have performed all the steps described in those documents before proceeding with the material explained in the present document.
Document overview
Once you have performed all the steps explained in your SMP installation guide, you are ready to perform the following tasks, as described in this user manual:
Configure your SMP so that it can communicate with your devices:

Define the hardware. Configure the master protocol instances that will communicate with your substation devices. Configure the data points. Set-up the communication links between the SMP and the substation devices. Associate master protocol instances with communication links. Validate, activate and test your configuration.
View the following information in real time:

The SMP log files. Protocol exchanges. Communication statistics. Data points, using a Web browser.
Configure your SMP so that it can communicate with one or more control centers:

Configure a slave protocol instance for each control center. Have each control center subscribe to the data points. Associate slave protocol instances with communication links.
You will also become familiar with the following SMP features:

Security. Passthru connections. DFR and event file processing. Automation functions. Design a local HMI on the SMP 16 Redundancy. SNMP exporting. Time synchronization. SMP access through a direct or dial-up connection. SMP access through a dial-up connection for DNP3 and IEC 60870-5-101 protocols.
You will also learn how to update the SMP software and tools, and to troubleshoot any problems you may encounter with your SMP gateway.
Introduction
Electrical power utilities face a number of challenges when attempting to automate their substations. They have legacy devices that they want to continue using. They want to integrate new devices. They may want to add one or more control centers. They may want to use a local HMI in order to keep a close watch on all events that occur in the substation. There are a number of problems to contend with: connectivity, protocol incompatibilities, interoperability problems, security considerations, logistics for migration, downtime, and not the least of which, total project cost. The SMP gateway has been specifically designed to address all these issues. It is the ideal product to ensure a smooth, safe and cost-effective approach to substation modernization. Indeed, you can use a step-by-step approach. You decide which steps to take, in which order, and when.
Logical architecture
The SMP is designed to meet all the requirements for power substation automation. It has an open architecture that allows you to easily add new protocols, devices, local area networks, wide area networks, and control centers. In this section, we will describe the logical architecture of the SMP gateway and we will see how it implements all the functions required of a substation gateway.
Masters and slaves

A typical automation system consists of a SCADA system, located in a control center, which is connected to devices located in the substation. The SCADA regularly polls the devices in order to retrieve device readings and statuses. The operator uses the SCADA system to perform control functions on selected devices. Since it is the control system that initiates data acquisition and control, it is considered to be the master system. Since the substation device responds to data acquisition and control requests, it is considered the slave system.
SCADA
MASTER
SLAVE
DEVICE
Figure 1
Master and slave systems
Introducing the SMP in the automation system

When an SMP is introduced in the automation system, it has to act as both a slave and a master. The SCADA system interrogates the SMP as if it were a substation device. The SMP is thus a slave to the SCADA. However, since the SMP is connected to the substation devices, it must also be able to perform the functions of a master, such as polling for data and sending control requests.
SCADA
MASTER
SLAVE
MASTER
SLAVE
DEVICE
Figure 2
The SMP as a Master-and-slave system
SMP internals
The SMP's internal architecture is based on a series of software components called protocol components. Slave protocol components implement all the functions necessary to process
requests received from a SCADA or control center. Master protocol components implement the functions necessary to poll devices and send control requests. Cybectec provides components for most standard protocols, such as DNP3, MODBUS, IEC-60870-5-101/103/104 and IEC 61850, as well as a large number of proprietary protocols such as SEL, ABB TEN BYTE, Motorola MDAC, and more. The master protocol component polls the device and stores the data that it retrieves in an internal database, called the Real-Time Data Exchange (RTDX). The RTDX is much more than a simple data store. Besides storing the current value of all the device data points, it also stores the different types of information than can be provided by a substation device, such as the quality and timestamp of the data. It also stores information such as device tags used for control functions.
SCADA
SLAVE PROTOCOL
REAL-TIME DATA EXCHANGE
MASTER PROTOCOL
DEVICE
Figure 3
The SMP real-time data exchange
Communication components
SMP protocol components process the messages exchanged among the control centers and the devices. However, these messages can be transmitted using various communication methods. For instance, the MODBUS protocol can be used on a TCP/IP network or on an RS-232 serial link. SMP communication components implement all the functions required to communicate with a device or control center using a variety of communication technologies. Cybectec provides communication components for asynchronous serial ports, RS-232, RS-422, RS-485, TCP/IP and modems.
SCADA
SLAVE COMMUNICATION COMPONENT
SLAVE PROTOCOL COMPONENT
MASTER PROTOCOL COMPONENT
MASTER COMMUNICATION COMPONENT
DEVICE
Figure 4
SMP communication components
10
Configuring the SMP

The SMP configuration process consists of establishing the relationships among the internal components, and providing the specific settings for each of these components. This task is greatly simplified by Cybectecs SMP Tools family of software programs. These Windows-based programs help you configure your SMP and identify and correct any problems. The configuration process consists of the following steps:

Identifying the SMP model and the installed options. Creating a master protocol component for each device that is connected to the SMP. Defining all the data points in the device. Defining the communications link to be used to connect the device to the SMP. Creating a slave protocol component for each SCADA or control center. Defining the data points that the SMP will report to the SCADA. Defining the communications link to be used to connect to the SCADA. Adding a firewall and optionally a security server that supports corporate network users.
Thus, the configuration settings define the functions that the SMP performs. These settings are stored in a file that you load onto the SMP. The flexibility of the SMP architecture is the basis of Cybectecs step-by-step substation modernization strategy. In the following sections, we will show you how you can configure the SMP to perform all the functions required of a substation gateway.
11
Step 1 The transparent SMP

As a first step in a substation automation project, you can easily set up the SMP to act as a transparent interface between the SCADA and a substation device. The following diagram illustrates how you can do this for a MODBUS protocol.
SCADA
RS-232 CONNECTION
MODBUS SLAVE
MODBUS MASTER
RS-232 CONNECTION
DEVICE
Figure 5
The transparent SMP
In this configuration, the master component polls the device and stores the values in the RTDX. The slave component processes the SCADA polling requests and sends the values provided by the device. There is not much use for a transparent SMP. However, it contains much more than the components that we described previously. Simply by adding the SMP to the substation, you now have access to the following advanced functions:
Centralized automation functions, using the built-in Automation functions or the IEC 61131-3 Soft PLC logic processor. Real-time data display, using the built-in web server.
12
Transparent access to devices, using the passthru server, for local or remote IED maintenance. SNMP support to monitor communication status. Sophisticated HMI, interactive diagrams, data logging and reporting, using Cybectecs Visual Substation software. Sophisticated Windows tools for remote or local maintenance. A sophisticated security server to support corporate network users.
Even more important, the transparent SMP is the first step in integrating new substation devices to your existing SCADA and automation system.
SCADA
INTERNET EXPLORER
VISUAL SUBSTATION HMI
RS-232 CONNECTION
MODBUS SLAVE
WEB SERVER
VISUAL SUBSTATION
PASSTHRU
REAL-TIME DATA EXCHANGE MAINTENANCE TOOLS MODBUS MASTER IEC 1131 SOFT PLC SNMP
RS-232 CONNECTION
STATS
LOGS
TRACES
DEVICE
Figure 6
Additional SMP functions
13
Using the SMP as a protocol translator

As we saw in the last section, the SMP is transparent when the master and slave protocols are the same. When you configure different master and slave protocols, the SMP becomes a protocol translator. Since you can independently configure the communication links for the master and slave components, you can easily use the SMP to integrate legacy serial devices in a modern network environment. Similarly, you can connect modern IEDs to a legacy control center.
SCADA
TCP/IP CONNECTION
DNP3 SLAVE
MODBUS MASTER
RS-232 CONNECTION
DEVICE
Figure 7
The SMP protocol translator
14
Using the SMP as a data concentrator or device multiplexer

The SMP architecture is designed to simultaneously support any number of master components. Each component has its own communications link and its own protocol. All the data retrieved from the devices is stored in the RTDX, where it becomes available to the SCADA. Using the SMP as a data concentrator is a simple matter of configuration, and it provides a highly efficient means of adding new devices to an existing automation system. The SCADA system has no knowledge of the new devices; it only sees new data points.
SCADA
TCP/IP CONNECTION
DNP3 SLAVE
MODBUS MASTER
SEL MASTER
RS-232 CONNECTION
RS-232 CONNECTION
DEVICE
DEVICE
Figure 8
The SMP data concentrator
15
Using the SMP as a communications gateway

The SMP architecture supports any number of slave components. Each component has its own communications link, and all the device data can be sent to any number of SCADA and control centers, each with its own protocol. Using the SMP, sending data to a new control center is a simple matter of configuration.
SCADA MAINTENANCE CENTER
RS-232 CONNECTION
TCP/IP CONNECTION
MODBUS SLAVE
DNP3 SLAVE
MODBUS MASTER
RS-232 CONNECTION
DEVICE
Figure 9
The SMP communications gateway
16
Putting it all together

The SMPs sophisticated architecture allows it to integrate existing and new RTUs, IEDs, PLCs and control centers into a single homogeneous substation automation system. It provides you with a complete solution for automating new substations and modernizing legacy systems.
INTERNET EXPLORER VISUAL SUBSTATION HMI TOUCH SCREEN
SCADA
SCADA
RS-232 CONNECTION
TCP/IP CONNECTION
MODBUS SLAVE
DNP3 SLAVE
WEB SERVER
VISUAL SUBSTATION
LOCAL HMI
PASSTHRU
MODBUS MASTER
SEL MASTER
IEC 1131 SOFT PLC
SNMP
RS-232 CONNECTION
RS-232 CONNECTION
STATS
LOGS
TRACES
DEVICE
DEVICE
MAINTENANCE TOOLS
Figure 10
The SMP substation gateway
Securing the substation

Widespread data access within the SMP Substation Gateway can become an important security risk if it is compromised, but it can also become a security asset. This is why the gateways are ready for NERC CIP-002-1 to CIP-009-1 Cyber Security Standards. The gateway provides a single point of access to all substation data. The security features of the SMP gateway allow you to protect the substation devices (see Figure 11). If you activate the security features within your substation SMP you will be able to:

Comply with authentication and authorization policies. Set-up a firewall to protect from substation LAN security breaches. Monitor and lock out remote connections; and have a file integrity check on the SMP files. 17
The access inside the firewall protection has additional layers of protection, so that only a few users of your choice will have the possibility to modify parameters inside the substation.
Figure 11
The SMP substation gateway with a firewall
In the following chapters, we will learn how to configure the SMP to perform these functions.
18
The SMP Tools
To assist you with the tasks you will want to perform with the SMPs in your organization, we have provided you with our suite of SMP Tools. The SMP Tools are Microsoft Windows-based programs that make it easy for you to configure the SMP gateway and perform maintenance functions. They run on a PC, are simple to use, and provide advanced features that allow you to rapidly configure all the devices and communication links in your substation. They can be used locally or remotely through a LAN, WAN or VPN. When security is activated, users must log in before they can use any function. The Cybectec SMP Tools include the following applications:
SMP Manager Manages all the SMPs in your organization. It displays the state of each SMP, manages their configuration files, allows you to group two SMPs together to achieve redundancy, and is used to invoke the configuration and maintenance tools for any SMP to which it is connected. From SMP Manager, you can also start Internet Explorer to view the data points, logs and traces in real time, and you can start a Telnet session in order to set-up certain advanced features such as dial-up access or IRIG-B signal output type. SMP Config Used to configure the SMP. It has a spreadsheet-like grid that you use to specify the devices and control centers connected to the SMP, their protocols, their communication links and their data points. Advanced editing functions make it easy for you to enter the data points. Template editing allows you to pre-define standard devices with standard data points, thereby reducing labor intensity and the possibility of errors. 61850 Config Used to configure the IEC 61850 and UCA 2.0 protocols on the SMP. SMP Log Used to browse through and manage the log files maintained by the SMP. All significant events are logged, including local and remote control events, system failures, special protocol events, and so on. SMP Stats Used to browse through and manage a large variety of dynamically updated statistics, ranging from full communication statistics for each link to the processor load for each protocol component. SMP Trace Used to browse through the real-time traces generated by the SMP. SMP Trace can display 19
detailed traces of all protocol and communications link activity. Traces are displayed in both hexadecimal and application protocol format. The tracing functions are similar to those usually provided by protocol analyzers, with the notable exception that they can be used remotely at any time on any SMP and that they decode information at the application level. As such, they constitute an excellent commissioning or debugging tool.
SMP Connect Used to establish passthru connections with any IED connected to an SMP, for the purpose of doing remote configuration and maintenance of IEDs using manufacturer-provided software. SMP Loader Used with the SMP 4-20 and SMP 8-40 to load new versions of most of the SMP firmware components, and with the SMP 4, SMP 16/CP and SMP 16/SG, to load the secondary bootstrap program. Refer to Appendix A and to your SMP installation guide for details on using SMP Loader.
The next chapter will discuss how to create a list of SMP gateways with SMP Manager, and will then explain how to do a complete configuration of your SMP using SMP Config.
20
SMP Manager
SMP Manager is the doorway to your SMPs. It runs on your PC, as do all the tools you launch through SMP Manager. You are already familiar with the application, since you added your new SMP to the list of SMP gateways managed by SMP Manager when you installed your SMP. This section goes over a few of the points that were covered in your SMP installation guide, and provides additional information.
Starting SMP Manager and logging on

To start SMP Manager:

On the Windows taskbar, click Start. Point to Programs, then Cybectec, and then SMP Tools. In the SMP Tools menu, click SMP Manager.
The SMP Manager main screen appears and shortly after the Login Information dialog box appears.
Just click OK to close the dialog box unless security is configured.
21
Main window
The following figure shows a typical SMP Manager window.
As illustrated, the main window displays information such as:
The list of SMP gateways and the tools that are currently running for each SMP gateway in the list. The current status of each SMP in the list (started, failed, safe mode, max safe mode, on standby, and various intermediate states). The SMP model: SMP 4-20, SMP 8-40, SMP 4, SMP 16/CP or SMP 16/SG. The IP address and redundancy status of any SMPs you have grouped together for the purpose of redundancy. This information is available only if your license supports redundancy. This column is not available by default. Whether the SMP's built-in firewall is active and whether VPN is connected or disconnected. This information is available only if your version of the SMP software supports the SMPs security features. The firewall information is not available by default
You can choose which columns you want to display and their order of appearance, with a right click on the column header.
Adding an SMP
Creating a list of the SMP gateways you want to monitor is easy. Proceed as follows for each SMP gateway you want to add to the list:
In the SMP Manager Gateway menu, click Add to add your SMP gateway to the list.
The Gateway Properties dialog box appears.
22
Enter the name by which you want to identify your SMP gateway in Gateway Name. The Configuration file is the file that will be opened by default in SMP Config. If you change its name afterwards through the File menu, you must come back to this dialog box and change the name in the Configuration File text box, so it opens the right file at startup. In the First Address box, type the IP address of the first Ethernet port. You can also type the address of the second Ethernet port in the Second Address box, although it is not necessary to do so. If the SMP gateway cannot be directly accessed through the network, but requires a dialup connection, check the box The gateway is connected over a remote dial-up to prevent SMP Manager from polling the gateway for its status. Click Add.
The SMP gateway gets added to the list, and SMP Manager automatically detects the model of the new SMP and in the case of an SMP 4, whether an internal modem is installed.
Information provided by the SMP gateway icon

The SMP gateway icon, which is displayed beside each SMP gateway name, provides additional information about the SMP gateway. The following table gives the meaning of each icon: Icon Description
A device with two red LEDs. SMP Manager is unable to establish a connection with the SMP gateway. A device with flashing yellow and green LEDs. SMP Manager is connected to the SMP gateway. A blank page. A file (configuration file, new software, etc.) has been modified and will be activated when the SMP is restarted. A lined page and a pencil. A report is currently in progress. The report file provides detailed information about the SMP gateway. You should,
23
Icon
Description
therefore, send an SMP gateway report file with any request for technical support. A device, flashing yellow and green LEDs and a yellow telephone. SMP Manager is connected to the SMP gateway via remote dialup. A device and a telephone, greyed. The SMP gateway is configured for remote dialup but not currently connected to SMP Manager. A device, red LEDs and a yellow telephone. SMP Manager is unable to establish a connection with the SMP gateway over the remote dialup connection.
Customizing the display

You can customize the display in the SMP Manager window to suit your needs. You can choose which columns you want to display, and the order in which you want them to appear. Column
Gateway
Description
The list of SMP gateways and, if you request it, the tools that are currently running for each SMP gateway in the list. The IP address of any SMPs you have grouped together in SMP Manager. This column is not available by default. The current status of each SMP in the list (started, failed, safe mode, max safe mode, on standby, and various intermediate states). The SMP model: SMP 4-20, SMP 8-40, SMP 4, SMP 16/CP or SMP 16/SG. Whether the SMP's built-in firewall is active. This information is available only if your version of the SMP software supports the SMPs security features. If the SMP is connected to SMP Manager using VPN or not. This column shows the virtual address given to the redundancy group. If the address is modified, the new address will appear beside the old one, separated by an arrow. Upon the next reboot, the device will be grouped under the new address only. This column shows whether the security is activated or not, if it is global or local, and how recent it is.
IP Address
Status
Platform Firewall
VPN Group
Security
Adding or removing a column

To toggle between displaying a column and removing it from the display: 24 SMP Gateway User Manual
Right-click any column heading. In the shortcut menu, locate the column you are interested in. Put or remove a checkmark to add or remove the column to or from the display.
Changing the position of a column

To change the order of a column in the display:

Click the column heading of the column you want to relocate. Drag the heading to the target location.
25
Configuring the SMP
Introduction
As we saw under Principles of operation, you have to configure the SMP before you can use it. For this, you use SMP Config to define the characteristics of your SMP and the functions it has to perform. The configuration is stored in a file that is then loaded onto the SMP, where it is stored in non-volatile flash memory. Using SMP Config, you will perform the following configuration steps:

For an SMP 4-20, SMP 8-40, or an SMP 16/SG define the hardware options installed. Create a master protocol instance for each device to be supported. Define each data point on each device. Configure the communications link to be used to connect to each device. Create a slave protocol instance for each SCADA or control center. Configure the communications link to be used to connect to the SCADA. Map the device data points to SCADA data points.
You will then use SMP Manager to send the configuration file to the SMP. Note: There can only be one instance of SMP Config running at any given time. If you launch the tool for a given SMP and then launch it again for a second SMP, SMP Config will prompt you to save any changes you have made, close the configuration file of the first SMP, and then open the configuration file of the second SMP.
To create a configuration file for your SMP gateway, proceed as follows:

Start SMP Manager. In the SMP Manager application window, click your SMP gateway. In the Tools menu, click SMP Config to start the application.
27
The SMP Config display includes 3 panes. The left pane is a tree structure of all the configuration topics. The top right pane displays the settings for the topic you have selected in the left pane. The bottom right pane appears when your request that the configuration be validated; it displays error and warning messages. The gateway name is the name you assigned when you added the SMP gateway in SMP Manager. The configuration file name on the title bar was also assigned when you added the SMP gateway in SMP Manager. If you open the Master Protocols and Slave Protocols branches, you will see that the tree structure offers you a fixed set of protocols. These are the protocols currently supported by your product license.
28
Creating master protocol instances

You need to add a master protocol instance for each device you want to access with your SMP (see Figure 2). Even if a number of devices share a multidrop link, each of them requires its own master protocol instance. Each device is a slave, so the SMP acts as a master when communicating with the device, which is why it requires a master protocol instance. There are two ways to add the master protocol instance:
You can use a template, which eases the task of configuring the master protocol instance, by automatically entering the points list for the device. SMP Config provides templates for a number of common substation devices. If no template is available, you will need to enter the points list. If you are configuring a number of devices of the same type, you can save the first device configuration as a template that you will then use to enter the other devices.
Once you have added a master protocol instance and entered its data points (manually or via a template), you can click a particular data point type in the left pane and see the list of data points and their settings in the right pane, as shown next.
Creating a master protocol instance from a template

To add a master protocol instance from a template:
In the left pane, open the Master Protocols branch, to display the list of master protocols provided under your product license. In the left pane, click the protocol for which you want to add an instance. The list of all defined master protocol instances appears in the right pane. In the Tools menu, click New Instance From Template.
29
Choose the appropriate template, and click Open. In the dialog box, enter:

The name of the new instance. The device prefix. The device prefix is a string that identifies the device and is used as a prefix for all of its data point names. The prefix ensures that every name in the system is unique. An explanation of the usage of prefixes is provided under Configuring the master protocol general settings, in the next sections.
The new instance appears in the left pane. If you open its tree structure and click the various physical data point types, all the data points supported by the device will be displayed in the right pane.
Creating a master protocol instance manually

To add a master protocol instance manually:
In the left pane, open the Master Protocols branch, to display the list of master protocols provided under your product license. In the left pane, click the protocol for which you want to add an instance. The list of all defined master protocol instances appears in the right pane. In the right pane, enter the name of the new instance at the end of the list of names, and press the Tab key on your keyboard.
The new protocol instance is added in the left pane, under the protocol type you had selected. If you expand its tree branch and click an item, the corresponding protocol settings will be displayed in the right pane. Note that if you click a physical data point type in the left pane, the right pane will display an empty row since you will have to add the physical data points manually.
Configuring the master protocol general settings

All master protocol components share common settings that define how they interact with a device. The following procedure describes how to enter these settings. If you created the protocol instance from a template, the general settings have been defined for you. However, you should verify the settings to make sure they match your device configuration, and you should familiarize yourself with the naming conventions discussed in this section.

In the left pane, click General to display the list of general settings for the selected protocol. In the right pane, enter a Device Prefix. The string you enter will be used as a prefix for all the I/O point names of the device. It is mandatory for each instance of a protocol. It is used to distinguish data point names that are on the same device type, but on multiple physical devices. The device prefix ensures that every data point name in the system is unique. Device prefixes are described in the following section, Adding data points from a protocol template.
Device prefix and naming conventions
30
A typical substation automation project requires the configuration of thousands of data points. You can significantly reduce the effort by carefully planning how to name devices and data points. Cybectec tools provide additional functionality if the names of data points are based on some type of convention. For our engineering projects, we use a naming convention such as the following:

A data source name, such as the substation name: MAPLE, CEDAR. A voltage level: 220 or 25. A device name: L1 to indicate a line, T1 to indicate a transformer, F1 to indicate a feeder, BUS for a bus bar. A signal name: V_phsA_mag to indicate the phase A voltage magnitude, A_phsA_mag to indicate the phase A current magnitude, Pos_st to indicate the status of a breaker or a line switch.
With such a convention, a data point called CEDAR_220_BUS_V_phsA_mag clearly indicates the voltage magnitude of phase A on the 220 kV bus of the CEDAR substation. A data point called MAPLE_025_F1_Pos_st indicates the status of the breaker switch of feeder 1 at the MAPLE substation.
Still in the General settings, enter the scanning settings. For instance, to configure a MODBUS master protocol, you would provide settings such as the following:

A Device Address, typically 1. A MODBUS Type, typically RTU Serial. A Scan Interval, typically 1000 ms.
A complete description of all settings is provided in the document entitled Master Protocol Common Concepts. Protocol-specific settings are described in individual documents, such as DNP3 Master Protocol.
Accessing protocol-specific documentation

There are Cybectec documents available, to which you can refer for details on the settings of the currently supported protocols. To access the documents, proceed as follows:

Click Start, on the Windows taskbar. Point to All Programs, then Cybectec, then SMP Tools, and then Documentation. In the Documentation menu, click Protocols.
The list of available documents is displayed in an explorer window.

Click the document you want to read. In the File menu of the explorer window, click Open with Acrobat.
Your Adobe Acrobat program starts up and displays the document in a window.
31
Configuring the data points

Once you have provided the general settings of the protocol component, you then enter all the data points on the device. If you created the protocol instance from a template, all the data points have already been added; however, we suggest you read this section for your information. Protocol components typically support physical and logical data points of the following types:

Analog inputs Binary inputs Analog outputs Binary outputs
A physical data point represents a real-life value, implemented on an external device. You need to identify all the device data points, either manually or using a device template. A logical data point is a value managed by the SMP. These data points are built-in and cannot be modified, but they can be disabled. Analog inputs are measured values. The system keeps 2 values for each analog measurement obtained: a raw value, which is usually the value retrieved from the device, and a calculated value expressed in engineering units, obtained using the following standard formula: Engineering value = Raw Value X Scaling Factor + Offset Binary inputs represent the state of a data point. The state is either ON or OFF. Analog and binary outputs are typically initiated by a slave component, which sends a control request originating from a control center, to the master component involved. When you create a data point, you specify the type of data and you indicate how the SMP will retrieve it. General properties such as name, type and units, are independent of the type of device or protocol used. Protocol-specific properties indicate how the SMP will retrieve the data from the device. Each protocol uses its particular form of addressing, such as index values or data offsets. For example, to add a data point for a MODBUS device:

Click the appropriate branch under the protocol instance. In the right pane, enter the name of the data point and fill in all the appropriate settings. For instance, to define an analog input you would provide the following settings:
The name of the data point, such as BUS_VA. SMP Config will automatically add the device prefix to this name, thereby generating the full name of the data point. The input source, such as Input Registers. The input format, such as Unsigned Integer. The input size, such as 16 or 32 bits. The word offset in the MODBUS device memory. The scaling information required to convert the raw value to engineering units. The Units and Description strings used to provide meaningful data displays.
32
A complete description of all settings is provided in the document entitled Master Protocol Common Concepts. Protocol-specific settings are described in individual documents, such as Modicon Modbus Master Protocol. A complete description of system data points can be found in System data points on page 196 of this manual. To access the various protocol documents:

Click Start, on the Windows taskbar. Point to Programs, then Cybectec, then SMP Tools, and then Documentation. In the Documentation menu, click Protocols.
Adding data points from a protocol template

Protocol templates can also be used to add points to a protocol component. For instance, you could use a template to add the data points provided by an optional device feature. You can do this by retrieving the data points from a protocol template. To do this:

In the left pane, click the protocol instance to which you want to add the data points. In the Tools menu, click New Points from Template.
A standard Windows Open dialog box appears.
In the Templates folder for the protocol type you selected, choose the .tpl file you want to use, and click Open.
A dialog box appears, prompting you for the optional prefix and suffix to be added to every new data point name. The upper portion of the dialog box provides information about the open template file, while the lower portion shows warning and error messages.
Specify a prefix and a suffix, if applicable.
The new data points now appear in their respective categories under the selected protocol instance, and their names contain the specified prefix and suffix. Note that the prefix and suffix are not applied to logical data points, and that the logical data points are reset every time you add data points from a protocol template. You should, therefore, configure these data points once you have completed the list of physical data points.
33
Creating a template from a master protocol instance

You can create a template of a master protocol instance, which you can retrieve later in order to quickly generate new protocol instances. To create the template:

In the File menu, click Save As Template. Choose the Templates folder in which you want to store the template, and click Save.
Note that a template file can contain only one protocol instance. So if you want to create templates for several protocol instances, create a new configuration for each one and save individual templates.
Duplicating a master protocol instance

Once you have created a master protocol instance and configured its data points, you may want to generate one or more additional instances with the same general and data point settings. A quick way to accomplish this is by duplicating the master protocol instance. To do this:

In the left pane, click the protocol instance you want to duplicate. In the Tools menu, click Duplicate.
A dialog box appears, prompting you for the instance name and device prefix, as shown in the following.
Enter the name and prefix of the protocol instance, and click OK.
34
The new protocol instance now appears in the left pane.
Configuring the communication links

A protocol component communicates with a device or control center using one of the following: a serial link, a modem or a TCP/IP network. The configuration of a communications component is completely independent of the protocol used. Before you connect a device to the SMP, you have to choose and configure the communications link.
Configuring the serial port interfaces

Depending on the options you choose in the hardware configuration, you can configure the SMP serial ports to support RS-232, RS-422 or RS-485 communication.

Click Serial Ports in the left pane, to display all the available ports. For each port, choose the type of interface to be used. Most substation devices typically use either Asynchronous RS-232 or Asynchronous RS-422/485. If you are using a serial port for a touch screen, select ELO Touchscreen.
Serial port naming conventions
The SMP 16 provides 16 serial ports, identified as A01 through A16. It also has a modem port labeled Modem, which has a Modem Asynchronous interface. The SMP 16/SG can also house up to 2 additional serial ports boards, that will be identified as B01 to B16 and D01 to D16. The SMP 4 and SMP 4-20 both provide 4 built-in serial ports. These ports are identified as COM1 Board A through COM4 Board A. The SMP 4 also provides a built-in console serial port. This port is identified as Built-in Console 1 Board A. This feature allows you to use the Console port as a standard serial port. If the SMP 4 has an internal modem, then it provides 3 built-in serial ports and 1 built-in modem port. These ports are also identified as COM1 Board A through COM4 Board A; however, the Interface column in the right pane indicates that the interface for COM4 Board A is Modem Asynchronous.
The SMP 8-40 provides 4 additional ports named COM1 Board B through COM4 Board B. The SMP 4-20 and SMP 8-40 SIOM use IPack modules to provide additional ports in groups of 8. The ports in the first group are called IPack_A1 Board A through IPack_A8 Board A. The ports in the second group are called IPack_B1 Board A through IPack_B8 Board A. The SMP 8-40 supports two additional groups of ports called IPack_A1 Board B through IPack_A8 Board B and IPack_B1 Board B to IPack_B8 Board B.
The purpose of each interface is given in the following table: Interface

Asynchronous RS-232
Description
Use this value to indicate that the serial port is dedicated to establishing a standard asynchronous RS-232 connection.
35
Interface
Asynchronous RS-422/485
Description
Use this value to indicate that the serial port is dedicated to establishing an asynchronous RS-422 or RS-485 connection. This value indicates that the port is used for modem asynchronous communication. The value is automatically assigned to the Modem port of an SMP 16 and to the COM4 Board A port of an SMP 4 equipped with an internal modem. Use this value to indicate that the serial port is configured to accept incoming direct serial connections. This type of connection allows you to use the SMP Tools as if you were connected to the SMP via a normal network connection. By default, the console port is always configured for RAS. Refer to the SMP 4 Installation Guide, GUI-00316-00026 T, or to the SMP 16 Installation Guide, GUI-00316-00032 T, for instructions on setting up a RAS IP address pool. Then refer to Remote access to the SMP gateway, page 171, in the present manual, for the step-by-step installation procedure. Constraint for the SMP 4-20 and the SMP 8-40: An SMP CPU board can support up to 4 different bit rates for the serial ports located on the front panel. This means that if you specify that the console serial port is configured for RAS, only 3 other bit rates will be available for the remaining 4 serial ports on Board A and that if all the other Board A serial ports are used, 2 of the 5 serial ports must have the same bit rate. Note that if you set the console serial port to Reserved and you do, in fact, accept incoming direct serial connections on the console serial port as well as on the 4 remaining serial ports, the SMP gateway application will disable the console port connection. This constraint obviously does not apply to Board B, since it has 4 serial ports and there are 4 bit rates available.
Modem Asynchronous
RAS (remote access server)
Redundancy
Use this value to indicate that the serial port is reserved for connecting 2 SMPs together as a redundancy group. See Error! Not a valid result for table., page 149. Use this value to indicate that the serial port is reserved for purposes other than those stated previously.
Reserved
Configuring the operation of the serial ports

Each serial port needs to be configured with the appropriate settings for the connected device.

In the left pane, open the Connections branch to display all the supported connection types. Click Asynchronous Serial Ports to display the list of available ports. Note that if you choose Redundancy as the interface for a serial port, that port will not appear in the list of Asynchronous Serial Ports, as it will be reserved for connecting the 2 SMPs that will be grouped together. In the right pane, enter the settings for the selected serial ports. The required settings are usually provided in the device manufacturers reference manual:
36
If you are using RS-485 2-wire communication, choose RS-485. If you are using RS-485 4-wire communication, choose RS-422. Choose the device communication settings: baud rate, byte size, parity and number of stop bits, such as 9600 baud, 8 bits, no parity, and 1 stop bit. Choose the device hardware handshaking mode:
If the link type is RS-232, most devices do not use handshaking, so you should keep the default values: RTS to Always On, DTR to Always On, and CTS to Ignore. If the link type is RS-422, set RTS to Always On. You shouldnt have any problem if you keep the other default values: DTR to Always On, and CTS to Ignore. If the link type is RS-485, set RTS to TX Request. You shouldnt have any problem if you keep the other default values: DTR to Always On, and CTS to Ignore.
If you are using RS-422 or RS-485 communication, specify whether or not you will be using line terminators. Refer to your SMP installation guide for a discussion of termination resistors.
Configuring TCP/IP connections

TCP/IP connections are most often used by slave components to connect to control centers. However, an increasing number of modern IEDs can be connected to a substation LAN using a TCP/IP connection. To configure a TCP/IP connection for a master protocol component:
In the left pane, click Connections, and then on TCP/IP Masters, to display the list of defined connections. In the right pane, enter the settings for the new TCP/IP connection in an empty row of the grid:

Provide a significant name for the connection If you are setting up an SMP 8-40, specify whether you will be using board A or board B to interface with the network. Enter the IP address of the device. Enter the logical port number of the device. This information is provided by the device manufacturer.
37
Associating a master protocol instance with a communications link

In the preceding steps, you configured a master protocol component and a communications component. Now, you have to associate the protocol component with the communications component.
To associate a master protocol instance with a communications link:

In the left pane, click Connection Usage. In the right pane, for each master protocol instance under Master Connection Usage, put a checkmark for the appropriate connection.
Note: If you have several devices that share a multidrop link, each device must have a different device address.
38
Testing the configuration

Since the configuration of an SMP gateway offers so many features, SMP Config tests and validates the configuration files before you load it onto the SMP gateway. Before going any further, you should make sure your configuration is error-free. Then, you will send it to the SMP in order to test it in a real-life situation.
Validating and saving the configuration

To validate the configuration:
In the Validate menu, click Validate All.
If your configuration contains any errors, messages will appear in the Messages pane, as shown next.
Correct any errors and repeat the process until the configuration is error-free.
To save the configuration on your computer:
In the File menu, click Save.
Note: You cannot save a configuration file that contains errors. This feature is intended to prevent you from inadvertently loading an invalid configuration file onto an SMP gateway. However, you can save your configuration file if the message pane displays warnings only.
39
Sending the configuration to the SMP gateway

Once the configuration file is valid, you can send it to the SMP gateway. To do this:

Click your SMP gateway in the SMP Manager application window. In the Gateway menu, click Send Configuration File and choose your configuration file, which has been saved in the location you specified in the Gateway Properties dialog box.
After sending the file to the SMP gateway, SMP Manager informs you that you have to restart your SMP gateway for the new application to go into effect.
In the Restart Gateway dialog box, choose Shutdown and Restart to have the SMP restart in normal mode. All restarts are automatically logged in the SMPs internal log file. You can enter a comment to indicate why you restarted the SMP. This comment will be added to the event log.
The SMP gateway will go through a series of startup steps, which will be displayed in the Status column of your SMP gateway. When startup is complete, if your configuration file is correct, the Status column will show Started, to indicate that the SMP has started normally. If your configuration file is incorrect, the Status column will indicate that there is a problem. There are a number of conditions that can prevent the SMP from activating a configuration. For instance, the hardware settings may not match the actual physical configuration of the SMP. If the SMP does not start up normally, turn to Troubleshooting, page 205. Now that you have a working configuration file with all the master data points, you can use the other SMP Tools and Internet Explorer to see what is going on with the SMP and with the connected device.
Retrieving an SMP gateway configuration file

When you are about to send a configuration file to an SMP gateway, as described previously, you should first retrieve the old configuration file from the SMP gateway and store it on your PC. This will not be necessary when you first configure your SMP, but on subsequent updates, it becomes an important precaution to take. Proceed as follows:

Click the SMP gateway in the list of SMP gateways. In the Gateway menu, click Get Configuration File.
In the Configuration Download dialog box, SMP Manager displays the available configuration files. The current configuration file is identified by the .par suffix, while the previous configuration file is identified by .old. You might also see files with the extension .txt and .ait.

Choose the .old file, and click the OK button. In the Save As dialog box, specify the name and path where the configuration file is to be stored. The name of the configuration file on the SMP gateway is used as the default name.
40
Working with SMP Config grids

There are many time-saving features you can use to enter data in an SMP Config grid. These features are presented next.
Selecting cells and lines

To select on or several cells:

Click single cell you wish to select. To select several cells, hold down the CTRL key while clicking the cells. To select part of a column or part of a row, click the first cell, hold down SHIFT and click the last cell you wish to select.
To select a column or a row:

Click the header of the line you want to select. To select several rows or columns, hold down the CTRL key while clicking their header. To select a group of rows or columns in a sequential order, select the header of the first one, hold down the SHIFT key and select the last one.
Duplicating a line
Proceed as follows to duplicate a line:

Click the header of the line you want to duplicate. In the Edit menu, click Duplicate Line.
The line is duplicated after the last line in the display. In the following example, we clicked on a line and clicked the Duplicate Line command twice, so the line appears twice at the bottom of the list.
Copying a value to a group of cells

The Change Selection command of the Edit menu allows you to copy a value from a particular cell, to one or more lines selected within the same column. To copy a value to one or more selected cells:
41
Click the cell to which you want to copy a value. If you are selecting more than one cell, use the Ctrl key or the Shift key on your keyboard, as per standard Windows procedure. In the Edit menu, click Select Cells. This makes the cells turn gray, as shown next.
Click in the cell that contains the value you want to copy. In the example, we clicked in the CI_01 Scale cell.
In the Edit menu, click Change Selection. The value is copied to the selected cells.
To deselect the cells, click Clear Selection in the Edit menu.
Note: If you have selected a group of cells and would like to add other cells to the group:
Select the desired cells using the Ctrl key or the Shift key on your keyboard, per the standard Windows procedure. In the Edit menu, click Add to selection.
Resequencing a group of lines

Some settings are sequenced, within a given column. You may decide to remove data points, in which case you will need to remove gaps in the numbering sequence. Resequencing all the entries would be quite tedious, the Resequence Selection command of the Edit menu makes it easy. In the following example, the line with Index no. 7 has been deleted. All subsequent index numbers are now incorrect. 42 SMP Gateway User Manual
To correct the problem, proceed as follows:

Click the cell with Index no. 8. Hold down the Shift key of your keyboard and click the last cell in the column. In the Edit menu, click Select Cells. The cells turn gray. In the Edit menu, click Resequence Selection. A dialog box appears, in which you must specify the starting sequence number (7) and the increment (1). The result is shown next.
To deselect the cells, click Clear Selection in the Edit menu.
43
Deleting an item
To delete a line in a grid:

In the right pane, click the header of the line you want to delete. Press the Del key on your keyboard, and confirm your intention of deleting the row.
The item disappears from the grid. To delete a protocol instance:
In the left pane, click the protocol type.
The list of instances of this protocol type appears in the right pane.

In the right pane, click the protocol instance you want to delete. Press the Del key on your keyboard, and confirm your intention of deleting the row.
The protocol instance disappears from both panes. To delete a serial port connection: By their very nature, serial port connections cannot be deleted in the same way. To delete a serial port connection, you have to reserve the corresponding serial port for another usage:

In the left pane, click Serial Ports. In the right pane, choose Reserved in the Interface list of the serial port.
Using tooltips
SMP Config provides context tooltips. These tooltips are not displayed on the status bar but rather appear when you point with the mouse to a cell in any grid. This type of tooltip normally displays the editing criteria for the field. For example, it may tell you that the value must fall between 10 and 1000, that the default value is 500 ms, that the field is mandatory if a certain other field contains a checkmark, and so on. So they will assist you in editing grids. Here is a sample tooltip:
This feature is a great time and effort saver, as it spares you from having to wait until you try to validate or save your SMP configuration before finding out that you have a number of errors.
44
Viewing the SMP log files
The SMP gateway maintains an internal log of all significant events. Using SMP Log, you can select and view the various log files in real time. You can view, print, search and save all or any information in this application. To start SMP Log and view the SMP log files, proceed as follows:

Click your SMP gateway in the SMP Manager application window. In the Tools menu, click SMP Log.
SMP Log starts up and displays the list of available logs.
Click a log in the left pane, to view its contents in the right pane.
Information provided by SMP Log

The following log files contain information that you will find useful for the configuration and maintenance of your SMP:
The Startup log records all the steps that the SMP performed when it last started. The log indicates which configuration file was loaded and which protocol components were configured and started. You should consult the startup log each time you change the SMP configuration, in order make sure it is a success.
45
The Reset log records the time and reason for each SMP restart. It indicates whether the reset occurred because of a power failure, a request from the front panel button, a remote request, a watchdog trip, or a fatal hardware or software problem. The Control log records the steps that the SMP performed in response to a local or remote control request. The Security log records all events that concern the security options such as authentication failures, file integrity check and much more.
The other SMP log files contain information that can help you and our technical support team in identifying problems.
SMP Log features

SMP Log offers you several handy feature: searching, printing and saving log file, and have the information displayed in UTC or local time.
Searching in SMP Log

To search in SMP Log:

From the menu View, click Search. Type a keyword in the text box and click the Search button. All the results will become highlighted, the first one will be lighter. To go to the next result, click Search Next in the View menu or press F3. To go to the previous result, click Search Previous in the View menu or press F3. Once you have found, click Cancel Search from the View menu and only the selected result will remain highlighted.
Printing a log
To print a log:

Select a folder. From the menu View, click Print.
Saving a log file

To save a log file:

Select a folder. From the menu View, select Save As. SMP Gateway User Manual
46
Type a name for the file, you can use a different extension such as .csv or .txt.
Viewing multiple log folders at once

To view e:

Select folders, using the shift or the ctrl key. All folders content will be displayed, merged in on screen.
Changing how the time is displayed

To change how the time is displayed:

From the View menu, click Time Display Options. From the Time Display Options dialog box, select the type of display from the Time Display Format drop box: you can choose between the local time and SMP UTC. Normally, your gateway is set in UTC, but you can display the information how you wish it.
47
Viewing protocol exchanges in real time
Using SMP Trace, you can view a continuous stream of protocol exchanges between the SMP and the substation devices, or between the SMP and the control center. At this stage, however, since you have only configured master protocol instances, you will only see the protocol exchanges that take place between the SMP and the substation devices. You can have the information displayed in UTC or local time, highlight the lines that contain specific keywords, and you can clear the current display. SMP Trace can generate a continuous log of all the events you are tracing, to a text file on your PC. It can also print or save to a text file, a snapshot of the traced events that occurred since the last time you cleared the display. To start SMP Trace and view the protocol exchanges:

Click your SMP gateway in the SMP Manager application window. In the Tools menu, click SMP Trace.
49
Information provided by SMP Trace

SMP Trace starts up and displays the list of available traces.
In the left pane, put a checkmark next to the item for which you want to view the protocol exchanges.
If you click a folder, everything within the folder is automatically selected. Using SMP Trace, you can view a detailed trace of all the system activity. The following traces provide information that you will find useful during the configuration and maintenance of your SMP gateway.
Master and Slave Protocol traces display the high-level information exchanges that occur between the SMP and the other system components to which it is connected. These application-level traces are similar to those provided by a protocol analyzer. They describe the requests sent to a device and the values retrieved. The Slave Protocols folder appears only if the protocol is defined. Connection traces display the data being exchanged between the SMP and a device. These low-level traces describe, in hexadecimal format, the byte stream sent and received to and from a device.
50
SMP Trace features

SMP Trace offers you several handy features: recording traces, searching, printing and saving trace records, and have the information displayed in UTC or local time.
Searching in SMP Trace

From the menu View, click Search. You can also press CTRL-F. Type a keyword in the text box and click the Search button. All the results will become highlighted, the first one will be lighter. You can click the Pause/Resume button in the toolbar to stop the screen from scrolling; this command is also available from the View menu. To go to the next result, click Search Next in the View menu or press F3. To go to the previous result, click Search Previous in the View menu or press F3. Once you have found, click Cancel Search from the View menu and only the selected result will remain highlighted.
Note: SMP Trace will keep highlighting matching results as long as you have not canceled the search. You can either deselect the binoculars in the toolbar or stop the search from the View menu.
Printing a trace

Select a folder. From the menu File, click Print.
Recording a live trace

To record a live trace for further analysis:
From the Record menu, select Start or click the red button in the toolbar. You are prompted for a file name.
51
You can also choose to save it inside the SMP's memory by selecting Record to SMP. For example, if you have an SMP 4 with a modem in a pole outdoors and you need to save 24 hours worth of activities, most of the time long distance costs are prohibitive. Use this option and connect again 24 hours later to pick up your data. When you wish to stop the recording, click the red button again or Stop in the Record menu.
Saving all the scrolled information

To save all the information in SMP Trace that scrolled since opening it:

Select a folder. From the menu File, select Save As. Type a name for the file, it will be saved in the .txt format.

To change how the time is displayed:

From the View menu, click Time Display Options. From the Time Display Options dialog box, select the type of display from the Time Display Format drop box: you can choose between the local time and SMP UTC. Normally, your gateway is set in UTC, but you can display the information how you wish it.
52
Viewing communication statistics in real time
The SMP stores a large number of real-time statistics and internal counters to help you analyze the performance of your SMP gateway and assist you in troubleshooting your configuration. Using SMP Stats, you can view, in real time, various statistics about the communication links and about the protocol exchanges that take place between the SMP gateway and the devices or control centers. You can have the information displayed in UTC or local time. You can also print the statistics, reset them, or save them to a text file for subsequent analysis. To start SMP Stats and view the statistics:

Click your SMP gateway in the SMP Manager application window. In the Tools menu, click SMP Stats.
SMP Stats starts up and displays the list of available statistics.
In the left pane, click the item for which you want to view the statistics.
The statistics are displayed in the right pane and you can see them change dynamically.
53
Information provided by SMP Stats

The following items provide information on the system activity; you will find it useful for the configuration and maintenance of your SMP.
The Connections folder contains counters and statistics about the performance of the SMP communication components. The Network (TCPIP) folder contains the list of all the network connections you defined under Connections, with SMP Config. The Serial (Asynchronous) folder contains the list of all the serial connections. The Modem Pool folder contains the list of any modem pools and modems you may have defined with SMP Config. You can configure modem pools and modem usage only if you purchase a modem support option for your SMP. The items in these folders provide an easy way to monitor the communication status of the SMP. For example, you can look at the Receive counter and Transmit counter values to determine whether the SMP is exchanging data with a connected device or control center. The Master Protocols and Slave Protocols folders contain counters and statistics about each instance of a protocol component. Each protocol component contains protocol-specific items that describe the messages exchanged with a device or control center. (The Slave Protocols folder is missing, in the example, because we have to define slave protocol components first.) The System folder contains counters and statistics about the operation of the SMP hardware and software.
SMP Stats features

SMP Stats you several handy features: resetting statistics, printing them, refreshing them, changing how time is displayed.
Resetting statistics
You can reset certain statistics, such as global RTDX or web server statistics:
From the menu View, select Reset; or click the 'X' button; or press CTRL-X.
Printing statistics
To print a statistics:

Select a folder. From the menu File, click Print.
From the View menu, click Time Display Options.
54
From the Time Display Options dialog box, select the type of display from the Time Display Format drop box: you can choose between the local time and SMP UTC. Normally, your gateway is set in UTC, but you can display the information how you wish it.
55
Using a web browser to view data in real time
The SMPs built-in web server provides an easy way to view the log files and statistics using your Internet Explorer web browser. It is also the easiest way to view the analog and digital input and output points in real time. To view the data points, you start Internet Explorer.

Click your SMP gateway in the SMP Manager application window. In the Tools menu, click Internet Explorer.
57
The web server window has a number of tabs at the top that allow you to switch to different data views. If you have password security, everything will be deactivated until you enter a valid username and password.
The About tab gives you key information about your SMP gateway, such as its current state, at what time it started up, and the master and slave protocol instances contained in your configuration. The Analog Input, Analog Output, Binary Input, and Binary Output tabs display the current value of all the SMP data points. The Logs tab displays the contents of the internal SMP log files. The data is the same as that provided by the SMP Log program. The Statistics tab displays the real-time statistics of the SMP. The data is the same as that provided by the SMP Stats program.
Note: The eSMP web server requires version 5.0 or a later version of the Microsoft Internet Explorer web browser. JRE (Java Runtime Environment) must also be installed on your computer. See your SMP installation guide for details.
Applying a filter to a data point display

If you click the Analog Input, Analog Output, Binary Input and Binary Output tabs, you can see all the data points change dynamically on your screen. Since there may be a large number of data points, you can use the Filter function to choose the points you want to display. To apply a filter:

Click in the checkbox of each point you want to display. Click Apply Filter, located at the top left above the window.
The window contents are refreshed, showing only the points you chose. To remove a data point from the filtered display:
Click in the checkbox of the data point.
The data point disappears from the filtered view.
Acknowledging data point value changes

To help you analyze your data, the web server automatically highlights any data point that changes values, by displaying it on a gray background. The data point stays highlighted until you acknowledge the change of value. You can also have the web server automatically acknowledge value changes after a short delay. To have Internet Explorer automatically acknowledge the value changes: 58 SMP Gateway User Manual
Click the appropriate tab, to choose the type of data. Put a checkmark in the Auto Ack. box located at the top right, above the data point display.
Data points will now be highlighted when their value changes, and the display will return to normal after a short delay. To manually acknowledge value changes for a particular type of data point:

Click the appropriate tab, to choose the type of data. Make sure there is no checkmark in the Auto Ack. box.
Data points will now be highlighted when their value changes. They will remain highlighted until you acknowledge the change of value.
Click Acknowledge, located at the top left above the data point display, to remove all highlighting.
59
Connecting the SMP to a control center
Now that we have seen how to configure master protocol instances, test the SMP configuration and view the data, we will see how to configure a slave protocol instance in order to forward the device data to a SCADA or control center.
Creating slave protocol instances

When the SMP communicates with a control center, it acts as a slave and as such, needs to use a slave protocol. One slave protocol instance is required per control center. To create a slave protocol instance:
In the left pane, under Slave Protocols, click the protocol for which you want to add an instance. In the right pane, enter the name of the new instance at the end of the list of names, and press the Tab key on your keyboard.
The new protocol instance is added to the left pane, under the protocol type you had selected. If you expand the protocol instance branch, SMP Config displays the protocol settings.
Configuring slave protocol instances

The configuration of a slave protocol component is similar to that of a master protocol component. You choose the protocol, enter the protocol settings, and specify the data points you want forwarded to the SCADA. The following procedure describes how to configure a slave protocol instance:
In the left pane, click General, to display the list of general settings for the selected slave protocol instance. In the right pane, enter the protocol settings. For instance, to configure a DNP3 slave component, you would provide settings such as: 61
The Link Address, which identifies the logical slave device. The address has to match the address used by the control center to communicate with the SMP. The Master Link Address, which identifies the control center. Whether or not you want to support Unsolicited Reporting.
In the left pane, click Default Variations. In the right pane, specify how you want the data points to be reported. For example, you may want to specify that when there is a change to an analog input point, you want the change reported as a 32-bit value, with the time at which the event took place.
A complete description of the protocol-specific settings is available in individual documents, such as DNP3 Slave Protocol. To access the various protocol documents:

Click Start, on the Windows taskbar. Point to Programs, then Cybectec, then SMP Tools, and then Documentation. In the Documentation menu, click Protocols.
Subscribing to the master data points

Slave protocol instances subscribe to data points in the real-time database. Whenever a master protocol instance writes to the database, the slave instance retrieves the data and applies its own settings to make it compatible with the requirements of the control center protocol. When you configure a slave protocol component, you select from among all the data points defined by the master protocol components, those data points to which you want to subscribe.

In the left pane, click the slave protocol instance. In the Tools menu, click Subscribe To.
The Subscribe to Master I/O dialog box appears.
62
Click in the Master I/O list, to display the list of data points defined for each master protocol instance. Choose the data points you want to forward to the control center. Use the Ctrl and Shift keys on your keyboard, to extend your selection. Click the dialog boxs right arrow button.
The data points you choose are added to the Slave I/O list. If, for example, you click a binary input point in the Master I/O list, the point is added to Binary Inputs, in the Slave I/O list. Normally, a data point that has been transferred to the Slave I/O list disappears from the Master I/O list. However, if you want the transferred data points to continue being displayed in the Master I/O list:
Put a checkmark in Show all enabled points.
If you change your mind, you can remove a data point from the Slave I/O list as follows:

Click the data point in the Slave I/O list. Click the dialog boxs left arrow button.
The data point is removed from the Slave I/O list and reinserted in the appropriate data point list for the appropriate master.
63
Configuring the data points

The slave component automatically converts the subscribed data points to the appropriate format for the protocol. However, you should make sure the default settings are appropriate and perform any necessary adjustments. To configure the data points:
In the left pane, click the data point type, to display a list of all the data points and their settings. There are different settings for each protocol. However, you should at least check the address or index assigned to each data point. For instance, the following settings are provided for a DNP3 data point:
Each data point is automatically assigned an Index value according to the subscription order. You should ensure that these index values correspond to those expected by the control center. The Event Class setting groups data points together for subsequent reporting to the control center.
Configuring the communication links

We previously described how to configure a serial communications link for a master protocol component. The procedure is identical for a slave protocol component that uses a serial communications link (see Configuring the communication links, page 35). However, a slave protocol component typically uses a TCP/IP connection over a LAN, to communicate with the control center.
Setting up a TCP/IP connection

To configure a TCP/IP connection for a slave protocol component:
In the left pane, click TCP/IP Slaves, under Connections, to display the list of defined connections. Enter the settings for the new TCP/IP connection in an empty row of the grid:

Specify a significant name for the connection. Specify the logical port number to be used.
64
Associating a slave protocol instance with a communications link

You now have to identify the link via which the slave component will communicate with the control center. To associate a slave protocol instance with a communications link:

In the left pane, click Connection usage. In the right pane, for each slave protocol instance under Slave Connection Usage, put a checkmark for the appropriate connection.
Validating and activating the configuration

You will now validate the configuration, save it on your computer, send it to the SMP, and restart the SMP in order to activate the configuration. The procedures for doing this were described earlier, in the following sections:

Validating and saving the configuration, page 39. Sending the configuration to the SMP gateway, page 40.
Testing the configuration

The SMP configuration now contains a slave component. Slave components are more difficult to test than master components, since they only process data in response to a request from a control center. You may find the following guidelines useful in determining whether the slave component is working properly:
Using SMP Log, check the Startup log, to see whether the slave component was started correctly. Using SMP Stats, open the Slave Protocols folder and check whether the slave component is processing any data. Using SMP Stats, open the Connections folder, and check whether any data is being exchanged through the slaves communications link. Using SMP Trace, open the Slave Protocols folder, and check whether the component is receiving requests from the control center. Using the web browser, Using SMP Trace, open the Connections folder, and check whether any data is being exchanged through the slaves communications link.
65
See the following sections for instructions on how to proceed to view the information:

Viewing the SMP log files, page 45. Viewing protocol exchanges in real time, page 49. Viewing communication statistics in real time, page 53. Using a web browser to view data in real time, page 57.
A particularly effective way to test a slave protocol instance is to use the SMP itself to set up a master protocol instance to poll the slave. Using this approach and the SMP Tools, you can easily examine the effect of the various protocol features, such as report by exception.
66
Connecting to another SMP
Introduction
It is possible to connect two SMPs together, by the means of the Interconnections option in SMP Config. In the case of an SMP Gateway, Interconnections will allow you to increase the number of IEDs to more than 128, for example. A slave Interconnections option has to be configured in one SMP, and a master Interconnections option is to be configured in the other SMP. This type of connection can be accomplished with such protocols as DNP3, but masters and slaves have to be in perfect synchronization. With Interconnections, points do not have to be specified one by one in the slave.
SCADA DNP3 MASTER
DNP3 SLAVE PARK AVENUE INTERCONNECTIONS MASTER INTERCONNECTIONS SLAVE CEDAR CREEK MASTER
SLAVE
IEDs
If you move from the device up to the SCADA, you will see how the master-slave configuration must be designed for this to work. In the example above, you can see a SCADA, a first SMP called Park Avenue, a second SMP called Cedar Creek, and an IED. The main steps are the following, using the example: SMP Gateway User Manual 67
In the device's master, create an Interconnections slave. Create its connection, associate it in connection usage. Create an Interconnections master in your SMP gateway. Import points. Give them a prefix to identify the different SMP when you see its readings in the web browser. Create its connection, associate it in connection usage.
Configuring the slave SMP

In the example, an IED was configured and is sending information to an SMP gateway called Cedar Creek, and an SMP gateway called Park Avenue needs to be connected to it, to have its data available for your SCADA. The first step to get your SMPs to communicate is to signify in the slave SMP the existence of your SMP.

Start SMP Config. Configure the Interconnections slave:

In SMP Config, under Slave Protocols, select Interconnections. Under Name in the right pane, type the master SMP's name (in the example, Park Avenue) and click again the Interconnections branch. A new branch will appear under Interconnections, name after what was just typed. Expand it and select Clients.
Under Type, select SMP Gateway. Under Client name, type the client name (in the example, Park Avenue).
Configure the slave connection:
68
Collapse the Slave Protocol branch and expand Connections, then select TCP/IP Slaves. Under name, type the TCP/IP slave's name. For example, you can name it Interconnections. Under Port, type 6655.
Configure the connection usage:
Click the Connection Usage branch. Under Slave Connection Usage in the right pane, you will see Park Avenue. Scroll to the right and select the checkbox for the TCP/IP slave's name (in the example, the name is Interconnections).
The procedure is identical for a slave protocol component that uses a serial communications link (see Configuring the communication links, page 35).
Configuring the master SMP

You have configured the slave SMP to get its information, now you will configure your SMP as an Interconnections master.

Select the master SMP; in the example it is called Park Avenue. From the Tools menu, select SMP Config. Configure the Interconnections master: 69
In SMP Config, under Master Protocols, select Interconnections. Under Name in the right pane, type the slave's name (in this example it is Cedar Creek) and click again the Interconnections branch. A Cedar Creek branch will appear under Interconnections. Expand it and select General. Type a prefix for the other SMP to distinguish its points. In this example, you can type You_.
Configure the points selection:

From the Tools menu, select Configure. Select the configuration file for the slave (ex. SMP Cedar Creek 's file would be Cedar Creek.par). The Update Data Points dialog box will appear, listing all the possible points that can be "interconnected". Click Update.
You will be returned to SMP Config.
Configure the master connection:
Collapse the Master Protocol branch and expand Connections, then select TCP/IP Masters. Under name, type the TCP/IP master's name. For example, you can name it Interconnections. Under IP Address, type the slave's (Cedar Creek) IP address. Under Port, type 6655.
Configure the connection usage:
70
Click the Connection Usage branch. Under Master Connection Usage, you will see Cedar Creek. Scroll to the right and select the Interconnections checkbox.
Save the configuration file and close SMP Config; send the configuration file to the SMP gateway using SMP Manager (see Updating the configuration file on page 190).
Send the configuration files to each SMP gateway. To see if it works, open a web browser in SMP Manager for Park Avenue. You should see points with the prefix YOU_, coming from Cedar Creek's IED.
71
Security
Introduction
The greatest benefits from IED integration can be derived when substation data becomes available to users at the enterprise level. However, widespread data access can become an important security risk if it is compromised. In August 2003, the North American Electric Reliability Council (NERC) issued the NERC 1200 Urgent Action Cyber Security Standard in order To reduce risks to the reliability of the bulk electric systems from any compromise of critical cyber assets (computers, software and communication networks) that support those systems. The NERC 1200 standard evolved into NERC 1300, and is now known as NERC CIP-002-1 to CIP-009-1 Cyber Security Standards. These standards describe measures that utilities will have to implement, as well as a strict timeline for implementation. This chapter describes the advanced security features that Cybectec has implemented since version 4 of the SMP gateway software and tools, in order to provide utilities with a secure, NERC-compliant, solution to integrating their substation devices. It then takes you through the steps required to customize the security settings to suit the needs of your organization, and provides some general guidelines on setting up a secure substation LAN.
Meeting NERC CIP requirements

Cybectecs SMP gateway helps you meet NERC requirements by providing secure access to substation devices. Its sophisticated software includes the following security features:
Authentication and authorization Each user is authenticated by the SMP gateway via a user name and a password. Strong passwords, individual user accounts, user groups, and detailed group permissions protect critical system functions from unauthorized access. All access attempts are logged, and accounts are locked out in the event of multiple failed attempts. Protection from substation LAN security breaches The SMP gateway is protected by a built-in firewall and a built-in VPN server. All TCP/IP ports are blocked, except those required for control center communication and SMP status monitoring. All communication
72
between the SMP gateway and the SMP Tools goes through an encrypted VPN tunnel, even when the SMP is in passthru mode.
Monitoring and locking of remote connections Modem and passthru access is continuously monitored, and can be enabled or disabled by the control center. All accesses are logged and limited to authorized users. Integrity checking All SMP software and firmware components are signed in order to ensure their authenticity and integrity. All executable files are also continuously monitored to prevent execution of unauthorized code.
Managing the security configuration of one or more SMP gateways

Getting started
The following sections will take you through the steps required to customize your SMP gateway configuration, in order to meet the security policy of your particular organization. To create a secured system, you need to build a database describing the allowed user names, their password and how many password errors they are allowed to make before being locked out. Every company has its own security criteria and Cybectec software lets you configure it accordingly. When the database is built and security is turned on, only the users in the list will be allowed to access the gateway. After setting up the authentication policy, establish a VPN connection to open a connection with the SMP before installing a firewall. The you should set up a firewall. A firewall is a system that blocks anything outside the company secured network. It protects the system against intrusion and especially against unwanted access. Once the firewall is in place, you can then open IP addresses for the SCADA and other such systems to specific IP services (ports). Additionally, the security built in the SMP does not allow an unsigned file in, it has to be a file signed by Cybectec to be allowed in the gateway. More information about this concept is given in the section File certification and integrity checking. Setting up your custom security configuration involves the following:

Defining your authentication policy. Customizing the various user groups and privileges. Identifying your users, setting their passwords, and assigning them to user groups. Validating and saving the security configuration on your PC. Sending your security configuration to one or more SMP gateways.
In this section, you will also learn the following:

Retrieve the security configuration of an SMP gateway and storing it locally. Disable the security configuration of one or more SMP gateways. Unlock a user account that has been locked out following failed login attempts.
73
View the security log.
Accessing the Login Information dialog box

When you start SMP Manager, you need to login to edit the security. If the login is not prompted upon startup, you can access the Login Information dialog box the following way:

In the File menu, click Change Current Login. The Login Information dialog box appears.
If security is configured on the gateway, logging in will acknowledge your rights from a list of authorized users so you can change settings. It is then highly recommended to check Always show this dialog box at startup because if you need to change settings you will already be logged in with the rights to do so. You will automatically be prompted for you credentials whenever you start the application. If you cleared the checkbox Always show this dialog box at startup, you will no longer be prompted at startup. It is more practical if no security is configured and that you do not plan it in a near future.
Appropriate Use banner in the Login dialog box

NERC CIP standards require that an appropriate use banner be displayed. SMP Manager allows this in the Login Information dialog box:
Create a text file named Appropriate Use Notice.txt in the folder (drive)\Program Files\Cybectec\SMP Tools\Manager\. In the text file, type the text required by the security policies of your company. When you restart the SMP Manager, the Login Information dialog box will contain the message you just typed in the text file.
The following is an example:
74
Defining your authentication policy

Your authentication policy forms an integral part of your security configuration. It specifies which login requirements a user has to meet in order to be authenticated. It also specifies whether the user account is to be locked out after a certain number of failed login attempts within a certain number of minutes, and whether the account is to be automatically unlocked after a certain amount of time.
To define your authentication policy for the very first time and assign a name to your security configuration:
Log into SMP Manager (see Starting SMP Manager and logging on, page 21).
The username and password you enter will automatically be assigned security management privileges. This will allow you to set up your authentication policy and your user groups and privileges.
In the SMP Manager Edit menu, click Security Configuration.
The Authentication Policy dialog box appears, as shown in the next illustration, and you are ready to enter the information.
To modify your authentication policy on subsequent occasions:
Log into SMP Manager with an authorized username and password. Only a person with security management privileges can modify the authentication policy. In the Edit menu, click Security Configuration.
The Security Configuration Editor window appears.
In the Security menu of the Security Configuration Editor window, click Authentication Policy.
The Authentication Policy dialog box appears.
75
The dialog box contains the following elements: Element

Security Configuration group box
Description
This section of the dialog box provides a description of the security configuration, and shows when the security configuration was last modified. Use this box to enter a meaningful description for your security configuration. This description will appear on the title bar of the Security Configuration Editor window as soon as you close the dialog box. This read-only box indicates which SMP Manager user last modified the security configuration. This read-only box indicates the date and time when the security configuration was last modified. This section of the dialog box specifies the login requirements a user has to meet in order to be authenticated. The password must contain at least the number of characters specified in this box. A checkmark specifies that the password must contain characters from at least 3 out of the following categories:

Description
Modified by
Date modified
Password group box
Minimum password length
Password must meet complexity requirements
alphabetic high caps alphabetic small caps numeric special characters.
76
Element
Account Lock group box
Description
This section of the dialog box specifies whether a user account is to be locked out from SMP gateway access if the user fails to log in properly and if so, what are the locking and unlocking parameters. If you remove the checkmark from this box, the user account will not be locked out even after numerous failed login attempts. All the other boxes in this section will become unavailable. Specifies the number of times a user can enter incorrect login information before the user account is locked out. The system will lock out the user account if the user makes the maximum number of login attempts within the number of minutes specified here. A checkmark specifies that a locked user account will be automatically unlocked by the system. A locked user account will be automatically unlocked after the number of minutes specified here.
Enable account lock
Maximum number of failed login attempts Lock account if max failed logins within
Activate automatic account unlock Remove lockout after
Modify your authentication policy to your needs, and click OK.
The dialog box closes, the description of your security configuration appears on the title bar of the Security Configuration Editor window, and your authentication policy goes into effect as soon as it is sent to the concerned SMP(s).
Groups and privileges

In the following table, you will find default user groups and privileges. You can change a group's privileges at will; of course you have to update the security file in the SMP afterwards. Note: If you remove privileges you must notice the concerned groups or users, or they will keep trying to access the gateway and fill up the security log with access denial messages.
Privilege
Security Management System Management
Description
Update security configuration: users, groups, and privileges; unlock user accounts. Update firmware, software, license and components; configure redundancy, firewall, VPN, RAS, SNTP, and SNNP; access Telnet and FTP servers. Update SMP gateway configuration file.
Groups
Administrators
Administrators
Configuration
Administrators, technicians.
77
Privilege
Read only
Description
Read SMP gateway configuration file only.
Groups
Administrators, technicians, operators. Administrators, technicians, operators. Administrators, protection engineers. Administrators, technicians, operators, guests. Administrators, operators. Administrators, technicians, protection engineers, operators.
Diagnostic
Use SMP gateway diagnostics tools.
Device maintenance
Perform direct IED maintenance via passthru connections. Monitor and access web access to SMP gateway central database.
Monitoring
Operation
Perform control, tag management and force operation on I/O points. Obtain remote access via dial-up or VPN.
Remote access
Editing user groups and privileges

Initially, your security configuration includes the following elements:

One predefined user, namely an administrator with full privileges. 5 predefined user groups, each with predefined privileges. Privileges are described in the Security Configuration Editor
You may want to add, delete or rename the user groups and change their privileges to reflect the security policy of your particular organization. Proceed as follows:
In the SMP Manager Edit menu, click Security Configuration.
The Security Configuration Editor window appears. If you click a user group in the left pane, the right pane shows the privileges assigned to this group and gives a description of each privilege.
78
To rename a group:

In the left pane, click the group. In the Group menu, click Rename. Enter the new name. You cannot rename the Administrators group.
Note:
To delete a group:

In the left pane, click the group. In the Group menu, click Delete.
You will be advised if there are any users assigned to the group you are about to delete. Note: You cannot delete the Administrators group.
To add a new group:

In the Group menu, click New. Enter the name of the new group.
You cannot add, delete or rename privileges. However, you can choose which predefined privileges you want to assign to a particular group. To do this:

In the left pane, click the user group. In the right pane, add or remove checkmarks.
Managing user groups and privileges

You will now identify the users that are authorized to access the SMP gateway, and you will assign each user to one or more groups.
79
To add a new user:

In the User menu, click New. Enter the name of the new user.
To rename a user:

In the left pane, click the user. In the User menu, click Rename. Enter the new user name.
To delete a user:

In the left pane, click the user. In the User menu, click Delete. You cannot delete the user called Administrator.
Note:
To assign a user to one or more user groups:

In the left pane, click the user. In the right pane, add or remove checkmarks, as shown next.
To assign a password to a new user or to change the password of an existing user:

In the left pane, click the user. In the User menu, click Set Password. In the Set Password dialog box, enter and confirm the new password.
Note: The first time you edit the security configuration, we strongly suggest that you rename the user called Administrator, since the name is so revealing that it could open the door to a serious security breach. For the same reason, we also recommend that you immediately assign a password to that user. 80
Validating and saving the security configuration

Your security configuration, which includes your authentication policy and the users and groups you have defined, is automatically validated and stored locally on your PC when you close the Security Configuration Editor window. However, if you want to manually validate your security configuration without closing the window, proceed as follows:
In the Security menu, click Check Validity. This will compare your security parameters such as passwords with the authentication policy that you defined beforehand.
There are two reasons why you may want to export to a file your security configuration on your PC:

To create a backup copy. To transfer your security configuration from one PC to another.
To manually save the security configuration to a file on your PC:

In the Security menu, click Send to File. In the Send Security To File dialog box, specify a file name and click Save.
Sending the security configuration to one or more SMP gateways

Your security configuration, which includes your authentication policy and the users and groups you have defined, is stored locally on your PC. To activate your security configuration on one or more SMP gateways, you have to send your local security configuration to the SMP gateway(s).
Sending the current security configuration

Proceed as follows to send the security configuration that is currently active on your PC:
In SMP Manager, click the SMP gateway or gateways to which you want to send the security configuration. In the Gateway menu, click Security Management, and then click Update SMP Gateway Security Configuration.
SMP Manager encrypts the information, and then sends the configuration to the SMP gateway or gateways. In the following example, we sent the security configuration to a single SMP gateway. The optional Security column contains the message Up to date to indicate that the security policy on the SMP4 ING gateway matches that on the PC.
81
Sending a previously saved security configuration

Let us suppose that an authorized person in your organization updated the local security configuration on his or her PC, and sent you a copy of the security configuration file. To load this new security configuration onto one or more SMP gateways, proceed as follows:
Retrieve the file:

In Security menu of the Security Configuration Editor window, click Get from File. In the Get Security From File dialog box, specify the file name and click Open.
The retrieved file now becomes the currently active local security configuration.

Close the Security Configuration Editor window.
In SMP Manager, click the SMP gateway or gateways to which you want to send the security configuration. In the Gateway menu, click Security Management, and then click Update SMP Gateway Security Configuration.
The Security column

The Security column displays the status of the security configuration that is currently active on the SMP gateway. Here is an explanation of the different values with a suggestion of what action to take, if any:
Up To Date The security configuration on the SMP gateway is the same as the security configuration that is currently active on your PC. This is the normal case.
Older (date and time) You sent a security configuration to the SMP gateway, but subsequently modified the local security settings. Therefore, the security configuration on the SMP gateway is older than your local security configuration. To rectify the situation:
82
Send your local security configuration to the SMP gateway (see Sending the current security configuration, page 81). The Status column will now display Up To Date.
Newer (date and time) You sent a security configuration to the SMP gateway, but someone on another PC subsequently modified his or her own local security configuration and sent it to the SMP gateway. To rectify the situation:
Contact the person who made the changes.
If you approve:
Retrieve the security configuration from the SMP gateway in order to update your own local security configuration (see Retrieving the security configuration of an SMP gateway, next section). The Status column will now display Up To Date.
If the modifications should not have been made:
Send your local security configuration to the SMP gateway (see Sending the current security configuration, page 81). The Status column will now display Up To Date.
? (a question mark) The software installed on the SMP gateway does not support the security features.
Retrieving the security configuration of an SMP gateway

You may want to replace your current local security configuration with the security configuration that exists on a particular SMP gateway. Proceed as follows:

In SMP Manager, click the SMP gateway. In the Gateway menu, click Security Management, and then click Get Security Configuration from SMP Gateway.
SMP Manager retrieves the file from the SMP gateway and upon your approval, updates your local security configuration with that retrieved from the SMP gateway.
Removing the security configuration from one or more SMP gateways

Proceed as follows to remove the security configuration from one or more SMP gateways:
In SMP Manager, click the SMP gateway or gateways from which you want to remove the security configuration. In the Gateway menu, click Security Management, and then click Remove Security Configuration from SMP Gateway.
83
Once you have confirmed your intention and the security configuration has been removed, the Security column of the SMP gateway(s) on which you clicked now displays the word Disabled. Note: Only your authentication policy and your user groups and privileges are disabled. The other security functions, such as integrity checking and firewall and VPN management, are not disabled.
You can reactivate the security configuration of one or more SMP gateways by simply sending them your local security configuration, as described under Sending the security configuration to one or more SMP gateways, page 81.
Unlocking a user account

Only a person with security management privileges can unlock user accounts that have been locked out following failed login attempts. To unlock one or more user accounts:
In SMP Manager, click the SMP gateway for which you want to perform the unlock operation. In the Gateway menu, click Security Management, and then click Unlock User Accounts. In the Unlock Accounts for < SMP gateway > dialog box:
Click Unlock all accounts. Click Unlock specific account, and specify the account in the User Name box.
OR
In the example shown next, 2 user accounts have been locked out, and we have asked to unlock a specific account.
Click Unlock.
Following the unlocking operation, the number in the Accounts locked box is decremented accordingly.
84
Viewing the security log

If you have security management privileges, you can view the security log and see all securityrelated events, including:

All authentications, whether granted or refused. All user account locks and unlocks. All configuration, maintenance, and security management activities. All Telnet, Web and passthru server accesses. Integrity check status information. Security server status information.
To view the security log:

In the SMP Manager Tools menu, click SMP Log. In the SMP Log application window, click the Security folder in the left pane.
The security-related events will appear in the right pane.
File certification and integrity checking

Introduction
Every executable file on the SMP gateway and every SMP Tool is signed to ensure that it originates from Cybectec. A digital fingerprint is encrypted and inserted in the file at the factory. Whenever you load a file onto the SMP gateway, SMP Manager or SMP Loader performs an integrity check on the file. Furthermore, a continuous integrity check is performed on the SMP gateway at all times, to detect whether any executable file has been tampered with by a virus or an unauthorized file has been loaded via an unconventional method. Once you have loaded a version of the SMP software that includes the security features, you cannot use a previous version of the SMP software or of the SMP Tools since they would have unsigned files and would, therefore, fail the integrity checks.
Detecting an integrity check failure

If a file fails the integrity check, the SMP gateway restarts and goes into a mode in which there is no communication between the devices and the SMP gateway. You can detect this situation as follows:
In the SMP Manager window, the Status column shows that the SMP gateway is in Safe Mode. All device points are tagged with a communications failure attribute. A series of alarms are generated, that can be seen at the SCADA or in a local HMI.
85
The Reset log indicates that the integrity check function has restarted the SMP gateway in Safe Mode. The Security log contains an entry indicating when the problem was detected, and several entries identifying each file that failed the integrity check. It can take up to 5 minutes for all entries to appear in the log.
Recovering from an integrity failure

Windows CE that is installed in the gateway, has an integrity check and if the gateway goes into the safe mode, it means that the gateway application needs to be updated to match Windows CE. To do so:

See Updating the SMP gateway application, page 193. If the SMP gateway goes into Safe Mode after the update, contact Cybectec technical support.
VPN connections and the SMP gateway firewall

Introduction
The SMP 4, SMP 16/CP and SMP 16/SG each offer their own built-in firewall, which provides maximum security against intrusion through the substation LAN. When enabled, the firewall shuts off all the TCP/UDP ports of the SMP gateway, except for the VPN port (TCP 1723) and another port that is reserved for internal use. All the network messages go through the VPN port, and if the security is enabled, are encapsulated and encrypted by the VPN (Virtual Private Network) protocol before being forwarded to the destination port. When the firewall is disabled, you can access the SMP gateway through the VPN port or through any other TCP/UDP port on the SMP gateway. Thus, using VPN connections without the built-in firewall is less secure since the network messages that go through the other ports are not encrypted.
Customizing the firewall and VPN connections

If you have system management privileges, you can customize the firewall and VPN connections to suit your needs. Proceed as follows:
Pre-establish the VPN connection: In SMP Manager, click the menu Gateway and select Establish a VPN Connection. What happens when you click this function the first time is that it creates the settings in the Windows Control Panel, in Network Connections. In SMP Manager you will see "Connecting". If you go to Network Connections in Windows, you will now see a new icon named after your gateway, under Virtual Private Network. Once connected, you can disconnect it and move on to the next step. Click your SMP gateway in the SMP Manager application window, and from the Tools menu. click Telnet to start a Telnet session. In the Telnet window, enter the username and password of a user account that has system management privileges. SMP Gateway User Manual
86
At the prompt, enter the following command: firewallmgr
The firewall manager displays the list of available commands, as the following shows: Firewall Manager. Available commands (case insensitive):
F L A D R V S H Q Enable/disable the firewall. Enable/disable the firewall log. Add a custom firewall rule. Remove a custom firewall rule. Show custom firewall rules. Set the maximum number of incoming VPN connections. Show the current firewall and VPN status. Display the list of available commands. Quit.
You can display the previous list anytime, by using the H command. The commands are described as follows:
F command
The F command enables or disables the firewall. The firewall is initially disabled and VPN is disconnected. Before enabling the firewall, make sure you can use VPN connections through your corporate network; otherwise, you will lose all communication with the SMP gateway, since all but the VPN port will be closed. When you request to enable the firewall, you are warned that you need to be able to make VPN connections. You are also given the option to enable the firewall either when you exit the firewall manager or when you restart the SMP gateway. If you have mistakenly enabled the firewall when, in fact, you cannot use VPN connections:
Ask your IT administrator to modify the corporate network to allow VPN connections to the SMP gateway, if possible.
If your IT administrator cannot solve the problem: Either:

Make a VPN connection via the SMP gateways subnetwork. Start a Telnet session and disable the firewall.
Or:
Connect your PC to the SMP gateways console port. 87
Start a Telnet session and disable the firewall.
L command
The L command enables or disables the firewall log. If you enable the log, all significant information related to firewall activity will be entered into the log. You will be able to view the contents of the Firewall log with SMP Log.
A command
The A command adds a custom firewall rule. A firewall rule is used to open additional ports in the firewall, to specify whether the ports will be accessed via the TCP or UDP protocol, and optionally, which IP addresses will be allowed to go through the ports. Example:
Pocket CMD v 4.20 \> firewallmgr Firewall Manager.
Available commands (case insensitive): F L A D R V S H Q Enable/disable the firewall. Enable/disable the firewall log. Add a custom firewall rule. Remove a custom firewall rule. Show custom firewall rules. Set the maximum number of incoming VPN connections. Show the current firewall and VPN status. Display the list of available commands. Quit.
"(H) Help, (Q) Quit: a" Custom rules allow access to the SMP Gateway according to the specified parameters. "Specify a rule name, leave blank to cancel: PassthruServer" What protocol do you want the rule to apply to? (T)CP or (U)DP [T]: t Specify the port range. Example: 21 500-520 Port range: 32500 "This port can either be opened for any computer, or for a specific" computer or subnet.
88
Do you want this port to be accessible from any computer [Y]? y Rule summary: Name: Protocol: Port range: Accessible from:
PassthruServer TCP 80 any computer
Do you want to proceed creating the firewall rule [Y]? Firewall rule created.
In the previous example, we opened ports 506 and 507 to TCP messages, and we specified that only IP address 10.87.35.4 could access the ports. Give any name you wish to the rule you create, as this space of text is only for you to remember it by. If we had entered the same IP address but a subnet mask of 255.255.0.0, for example, we would have granted access to all IP addresses within the range 10.87.0.0 and 10.87.255.255.
D command
The D command removes a particular firewall rule.
R command
The R command displays the list of firewall rules you have set-up.
V command
The V command specifies the maximum number of incoming VPN connections allowed. The default value is 2, but you can increase this number to a maximum of 5. If you decrease the number of VPN connections, some VPN connections will be closed when you activate the setting. You are therefore given the option to activate the new value either when you exit the firewall manager or when you restart the SMP gateway.
S command
The S command shows the current status of the firewall and VPN connections. Example:
Firewall: disable (currently disabled) Firewall log: enable (currently enabled) VPN connections: 2* (currently 3) * This setting will be applied on next restart.
In the previous example, we can see that at most 3 incoming VPN connections are currently allowed, but that on the next restart of the SMP gateway, this number will be changed to 2.
H command
The H command displays the list of available commands, as shown at the beginning of this section.
89
Q command
The Q command is used to exit the firewall manager. If you have modified any settings that will go into effect later, you are notified of the fact. Example:
(H) Help, (Q) Quit: q The following settings will be applied on next restart. Maximum VPN connections: 2 Press any key to exit.
Connecting and disconnecting VPN when the firewall is enabled

If you are running Windows XP or Windows 2000 on your PC, you can connect to a maximum of 2 SMP gateways simultaneously. With Windows Server 2003, the maximum number of VPN connections is 5. When the firewall is enabled, there a 2 ways to establish a VPN connection and to subsequently disconnect VPN. Method 1 This is the preferred and simplest method. To establish a VPN connection:
In SMP Manager, start any SMP Tool, or Telnet, or Internet Explorer.
The VPN connection is established automatically and remains active, regardless of how many tools you launch. The IP Address column displays the IP address of the VPN connection, and the VPN column indicates that the VPN connection is established, as shown next.
To disconnect VPN:
Close all the tools.
90
When you close the last tool, VPN is automatically disconnected. The IP Address column once again shows the address of the SMP gateway, and the VPN column indicates that VPN is disconnected. Method 2 This method is useful when the client application is not under the control of SMP Manager. An example might be the CoDeSys application. If you were programming the SMP gateways soft PLC with CoDeSys, you would enter the CoDeSys commands via your PC workstation (see The Soft PLC, page 145). Then when you were ready to load the CoDeSys script onto the SMP gateway in order to test and debug the script, you would proceed as follows.

Start SMP Manager. In the Gateway menu, click Make VPN Connection.
The IP Address column displays the IP address of the VPN connection, and the VPN column indicates that the VPN connection is established.
Use CoDeSys to download your script onto the SMP gateway via the VPN address associated with the SMP. In the Gateway menu, click Disconnect VPN.
The IP Address column once again shows the address of the SMP gateway, and the VPN column indicates that VPN is disconnected.
Connecting and disconnecting VPN when the firewall is disabled

As stated earlier, if you are running Windows XP or Windows 2000 on your PC, you can connect to a maximum of 2 SMP gateways simultaneously. With Windows Server 2003, the maximum number of VPN connections is 5. To use a VPN connection when the firewall is disabled:
In the SMP Manager Gateway menu, click Make VPN Connection.
The IP Address column displays the IP address of the VPN connection, and the VPN column indicates that the VPN connection is established, as shown next.
91
Substation network security considerations

Setting up a secure substation LAN
Security, as implemented on the SMP gateway, is not a substitute for full network security that includes properly configured firewalls. It can be argued that if unauthorized users get as far as trying out the SMPs security features, there has already been a security breach at some other level. The goal of the firewall, simply stated, is to minimize the risk of unauthorized access (or network traffic) to internal components on the PCN or SCADA systems. The substation LAN is a critical part of a utilitys network. To ensure its integrity, it must be isolated as much as possible from the outside world. Ensuring the security of the substation LAN is a complex subject beyond the scope of this document. However, in this section we will provide some general guidelines on setting up a secure substation LAN. A corporate LAN provides a number of access points to the outside world and is exposed to a variety of threats through its connection to the Internet, external mail servers and file transfers, which may contain viruses. If there is a direct connection between the corporate and substation LANs, the substation is not secure. A significant improvement is the use of firewalls with the ability to establish a number of demilitarized zones (DMZ) between the enterprise and process control networks. Each DMZ holds a separate "critical" component, such as the data historian, the wireless access point or remote and third party access systems. In effect, the use of a DMZ-capable firewall allows the creation of an intermediate network often referred to as a process information network (PIN). To create a DMZ requires that the firewall offer three or more interfaces, rather than the typical public and private interfaces. One of the interfaces is connected to the enterprise; the second is connected to the PCN/SCADA network and the remaining interfaces to the shared or insecure devices such as the data historian server or wireless access points. Figure 7 illustrates a typical DMZ firewall design in a PCN/SCADA setting.
Figure 12
Network security
To isolate the substation LAN, you should take the following precautions:
92
There should be no email access. There should be no Internet access. There should be no direct connection to the corporate LAN.
Furthermore, a redundant path should be provided between the SCADA and the substation, to ensure continued operation in the event of a failure of the corporate WAN. A dedicated communication line is often maintained for this purpose. A firewall must be used to isolate the substation LAN from the corporate WAN. The firewall should be configured to block all ports and connections except those that are absolutely necessary for the operation of the substation. For instance, the firewall could be set up to accept traffic between the SCADA and the SMP gateway only. The firewall could also be configured to limit traffic to a single port, such as that used by a DNP3 communications link. Note, however, that such a security policy would prevent the use of the SMP Tools outside the substation.
Using the SMP Tools through a substation LAN firewall

Cybectecs SMP Tools use Microsoft DCOM technology. This technology is designed to be used on a LAN. There are two strategies available to use DCOM through a firewall.
The most secure approach is to establish a VPN (Virtual Private Network) connection between the substation LAN and the client workstations on the corporate LAN. A VPN encapsulates and encrypts network messages before forwarding them to the recipient. You will not need any special setup when installing the SMP Tools. This approach will also secure access by any other tools. If you cannot use a VPN, you will need to open the necessary ports for DCOM on the firewalls and routers that connect to the corporate LAN. Here is the list of ports and port ranges that you have to open in the substation LAN firewall, to let a PC on one side of the firewall communicate with an SMP on the other side of the firewall: For access when not using VPN, open Application
FTP server Telnet SMP Status Web server RPC server and DCOM DCOM SMP maintenance server
Port
21 23 23 80 135
Protocol
TCP TCP UDP TCP TCP
1024 to 1124 49152
TCP TCP
93
Optional ports, using VPN or not Application

SNMP server SNTP server CoDeSys server Passthru server
Port
161 123 1200 32500
Protocol
UDP TCP TCP TCP
If using VPN, open Application

SMP Status PPTP (VPN) PPTP (VPN)
Port
23 1723 -
Protocol
UDP TCP and UDP GRE
Here is a list of the most commonly used ports for RTU and SCADA communication: SMP Config Protocol
DNP3 ICC-60870-5-104/103 IEC-61850 ICCP MODBUS
Port
20000 2404 102 102 502
IMPORTANT: This configuration will work only if you are NOT doing address translation. Check with your network administrator. If you are using SNMP, you will also need to open the following ports:

GET and SET commands go through port number 161. SNMP traps go through port 162.
94
Locking incoming RAS and passthru connections

Incoming RAS dialup connections to the SMP gateway, and passthru connections between the SMP gateway and the devices, represent yet another danger to the security of the SMP gateway. With the security features, the control center can lock all incoming RAS dialup connections, as well as individual passthru connections. The following logical data points, which you can view with the SMPs web browser, are used for this purpose: Data Point
_smp___dialupEnable
Description
This binary output point is used to lock or unlock all incoming RAS dialup connections to the SMP gateway. This binary output point is used to lock or unlock all incoming RAS dialup connections to the SMP gateway. This binary input point indicates whether or not there is a communication in progress via an incoming RAS dialup connection. This binary output point is used to lock or unlock a particular passthru connection. The name of the connection, as defined in SMP Config, is included in the name of the data point. This binary input point indicates whether a particular passthru connection is currently enabled or disabled. This binary input point indicates whether a particular passthru connection is currently active.
_smp___dialupEnabled
_smp___dialupInUse
_smp___passthru<connection>Enable
_smp___passthru<connection>Enabled
_smp___passthru<connection>InUse
Locking or unlocking all incoming RAS dialup connections

The control center can lock all incoming RAS dialup connections at any time, regardless of whether or not there is a communication in progress. After an SMP gateway restart, the connections are restored to whatever state they had before the restart. There are 2 ways to lock or unlock incoming RAS dialup connections: Method 1

In the SMP Manager window, start a Telnet session. Enter the command to start the RAS manager: RASMGR
Enter the command to toggle between locking and unlocking incoming dialup connections. X
Example:
(H) Help, (Q) Quit [h]: x
95
Do you want to lock the incoming dialup connections? [N]: y The incoming dialup connections are now locked. (H) Help, (Q) Quit [h]: x Do you want to lock the incoming dialup connections? [Y]: n The incoming dialup connections are now unlocked.
Method 2
Using an HMI or Visual Substation Explorer, perform the OPEN or CLOSE operation on the _smp___dialupEnable data point. You can do a Direct Execute or a Select Before Operate (SBO). (See the Visual Substation Explorer User Guide, GUI-00115-00020 T).
Locking or unlocking a passthru connection

The control center can lock or unlock passthru connections individually, and can also request that a particular passthru connection be automatically locked or unlocked on SMP gateway startup. To lock or unlock a passthru connection:
Using an HMI or Visual Substation Explorer, perform the lock or unlock operation on the _smp___passthru<connection>Enable data point (see the Visual Substation Explorer User Guide, GUI-00115-00020 T).
To request that a particular passthru connection be locked or unlocked on SMP gateway startup:

In SMP Manager, start SMP Config. In the left pane, click Passthru Connections. In the right pane, select the passthru connection, and either enter or remove a checkmark in the Blocked at Startup box.
96
Using passthru connections
Introduction
Most manufacturers of new IEDs provide PC-based tools for the configuration and maintenance of their devices. These tools usually connect to the device using a serial link or, less frequently, a network connection. The optional SMP passthru feature gives you the ability to use PC-based tools to access the devices connected to an SMP. With this feature, you can use the SMP as a terminal server for remote maintenance, monitoring and control of the connected devices.
97
The maintenance and configuration programs expect the device to be connected to a serial port on the PC. Since the device is now connected to the SMP instead, the passthru function has to intercept this communications link and provide a mechanism to exchange messages between the PC-based program and the SMP.
PC
SCADA VIRTUAL LOOPBACK PORT TOOL
SMP CONNECT
COMM LINK
SLAVE COMPONENT
PASSTHRU SERVER
MASTER COMPONENT
COMM LINK
DEVICE
Figure 13
Using a passthru connection
To do so, you need to set up a virtual loopback connection between SMP Connect and the maintenance or configuration tool. This allows SMP Connect to intercept the communications link from the maintenance or configuration tool and forward the messages to the SMP gateway. The SMPs passthru server then forwards the data to the device via a serial link. The combination of the SMPs passthru feature and the SMP Connect program provides a passthru connection between the PC-based maintenance program and a device. The maintenance and configuration tools can operate as if the device were directly connected to the PC. SMP Connect acts as a terminal server and gives you the ability to choose the device to which you want to connect.
98
While the PC application is communicating with the IED or RTU, the latter may have to suspend its data acquisition; indeed, depending on the serial line and device type involved, it may be necessary for all devices on the line to suspend their data acquisition, even though only one device is engaged in communications with the PC application. SMP Connect terminates the passthru connection if a problem arises or if there is no data exchanged during a specified timeout period.
Setting up passthru connections

Setting up a passthru connection involves a number of steps.
Using SMP Config, you identify the devices that will be using passthru connections. For each device, you provide information such as the SMP port to be used for the passthru connection, and the timeout after which the passthru connection is to be terminated if there has been no data exchange. In SMP Connect, you identify each application that will communicate with a device via a passthru connection. For each of these applications, you specify the type of loopback connection to be established between SMP Connect and the application, and you define the communication settings of the loopback connection. You use SMP Connect to select the target device and run the application.
Configuring SMP passthru

Using SMP Config, define the SMP passthru settings for each device that will be using a passthru connection:
In the left pane, click Passthru Connections.
In the following figure, we have set up passthru connections for 3 devices connected to an SMP 16.
Create a new connection by entering the following information in the empty row:
99
IED Name This name will be used to identify the device in the SMP Connect program. You should use the same name that you assigned to the device when configuring the master protocol component. Port Name Choose the serial port that links the SMP to the configuration port of the device. Some devices use separate configuration and data ports. In that case, you will use two separate cables to connect the device to the SMP; otherwise, the port will be the same as that used by the master protocol. Suspend Link This setting indicates that data acquisition should be suspended for all other devices sharing the multidrop link while SMP Connect is communicating with the selected device. The default is that acquisition of the remaining devices NOT be suspended. This setting applies only to devices that support the feature. Suspend IED This device-specific setting indicates whether or not the master protocol component should suspend data acquisition while SMP Connect is communicating with the device. The default is that acquisition be suspended. This setting applies only to devices that support the feature. IED Address This address identifies the device in a multidrop configuration. The Suspend IED option has to be checked or the value is ignored. Modem Signals This setting specifies whether or not the serial port associated with the IED supports modem control signals. If you put a checkmark, the DTR and RTS modem control signals will be transfered across the passthru connection. The default is that modem control signals are NOT supported. Blocked at Startup This setting is a security feature. If you put a checkmark, the passthru connection will not be available when the SMP starts up. You can subsequently make it available by enabling specific logical data points, as explained under Locking incoming RAS and passthru connections, page 95. Inactivity Timeout This mandatory setting specifies how long the SMP Connect link can remain inactive. If the program detects that there has been no data exchange between the device and the application during the specified timeout period, it prompts the user to either terminate the session or specify a longer wait time. Comments This optional setting gives instructions to the SMP Connect operator, such as telling him which communications program to use with the device.
Installing a loopback cable, if necessary

There are 3 types of loopback connections that you can set up between the device manufacturers maintenance or configuration application and SMP Connect:
100
A virtual serial loopback connection. This is the preferred choice. A real serial loopback connection. You set up this type of connection only if the device manufacturers application cannot use a virtual communications port. A TCP/IP loopback connection. You set up this type of connection only if the device manufacturers application uses TCP/IP.
If you set up a real serial loopback connection, the manufacturers program will use one of the PCs serial ports, such as COM1, to connect to the device, and you will connect that serial port to another of the PCs serial ports, such as COM2. The data exchanged on COM1 will then become available to the SMP Connect program. To connect the 2 serial ports together:
Install a null modem cable.
This type of cable crosses the receive and transmit signals so that the output of one is fed into the input of the other.
Setting up a list of applications and loopback connections

SMP Connect communicates with the device manufacturers application via a loopback connection. There may be several applications running on the PC. You have to identify all the available applications and for each application, you have to provide the following information:
Specify whether the application is to be started manually, identify the path to the application, and provide any arguments required by the program. Specify what type of loopback connection is to be used between SMP Connect and the application, and define the communication settings of the loopback connection.
To start SMP Connect:

Click your SMP gateway in the SMP Manager application window. In the Tools menu, click SMP Connect.
The SMP Connect application window appears, showing a list of all the devices configured to support passthru connections. The top portion of the screen shows what you entered in SMP Config, with one add ional piece of information; the PThru Active column indicates whether a passthru connection is currently being used for a particular device. The bottom portion of the screen shows a trace of passthru connection events. Using the SMP Connect menus, you can specify whether the trace window is to show UTC or local time. You can clear the trace, and you can save it to a text file on your PC.
101
To identify the application program that will communicate with a device and to define the communication settings of the loopback connection, proceed as follows:

Click the device in the top pane of the SMP Connect window. In the Control menu, click IED Application Settings.
The IED Application Settings dialog box appears. The first time you use this box, you will use the 4 buttons at the top to create the application list.
In the dialog box, click the application in the list, and specify:
Whether the application is to be started manually. If you put a checkmark, then when you connect to the device, SMP Connect will start the passthru and loopback connections without starting the application; you will be able to start the application manually. The complete path to the devices maintenance and configuration tool. The command line arguments required by the tool, if any (see the manufacturers documentation).
102
Whether SMP Connect is to use a virtual serial loopback, a real serial loopback, or a TCP/IP loopback connection to communicate with the tool. Most manufacturers tools use a virtual or real serial connection. However, if you are using a terminal emulator program such as Microsoft HyperTerminal, to communicate with the device, you can use a TCP/IP connection. The settings of the virtual serial loopback connection (Configure button):

Application port. Communication settings (parity, data bits, stop bits, flow control).
OR
The settings of the real serial loopback connection (Configure button):

Application port. SMP Connect port. Communication settings (parity, data bits, stop bits, flow control)
OR
The settings of the TCP/IP loopback connection (Configure button): (the dialog box shows the IP address of your PC).
Logical port number for the TCP/IP connection; enter the same TCP/IP port number that you set in the device manufacturers tool or in the HyperTeminal program. Indicate whether your application uses the Telnet protocol. Most terminal applications using TCP/IP do use the Telnet protocol, so the box contains a checkmark by default.
Connecting to the device

Click the device in the device list. In the Control menu, click Connect to IED . In the IED Application Selection dialog box, choose the application to be used. Click the Connect button.
Normally, the configured application window opens and you can start entering commands. However, if you requested that the application be started manually, the trace window will show that SMP Connect has established the SMP passthru connection and has started the loopback connection with the application, but the application window will not open. You will have to start the application manually before you can enter commands.
103
Testing the passthru connection

Setting up a passthru connection is usually a straightforward operation. When problems occur, it is often because a device cannot communicate and perform data acquisition simultaneously. You may find the following guidelines useful in identifying and solving problems with passthru connections:
Using SMP Config, check the Suspend IED setting for the selected passthru connection. If you modify the setting, remember to load the modified configuration and restart the SMP. Using SMP Connect, check the message pane to see if the passthru connection is being activated correctly. Using SMP Trace, open the Master Protocols folder, and check whether the component is receiving requests from the control center. Using SMP Trace, open the PassThruServer folder, and check whether any data is being exchanged with the device. Using SMP Trace, open the Connections folder, and check whether any data is being exchanged with the device.
Deactivating the SMP passthru connection

To deactivate the SMP passthru connection:
Close the manufacturers application or HyperTerminal.
OR

Click the device in the SMP Connect window. In the Control menu, click Disconnect from IED.
The SMP Connect trace window now shows that the passthru connection is no longer active. Note: The passthru connection is automatically deactivated if there is no data exchanged on the link during the inactivity timeout period specified in SMP Config.
104
Retrieving DFRs or other event files retrieved from the devices
Many devices can produce digital fault records or other event files. You can setup your SMP gateway so that it automatically retrieves these files and stores them on one or more computers for subsequent analysis. Using SMP Config, you will go through the following steps:

You will define system folders located on the remote computer or computers. When you configure the master protocol, you will specify the system folder in which the master protocol is to store the event files that it retrieves from the device.
Defining the system folders

Proceed as follows to set up the system folders in which the event files are to be stored:

In the left pane of the SMP Config window, click System Folders. For each folder you want to define, fill in the following information in the right pane:

Enter a unique numerical Folder ID. The folders should be numbered 1 through 99. Supply a name for the folder. In Location, enter the path to a shared folder on a remote computer, using UNC (Unified Naming Convention). For example, if you enter: \\cpu104\Events, the system folder you are defining represents the shared folder called Events on the computer with machine name cpu104. The SMP must have access to a WINS server in order to resolve computer names. See the SMP installation guide for more information. Enter the Username and Password if access to the shared folder requires a username and password. You must use the machinename\username or domainname\username format. Enter 0 for Low Disk Space Alarm if you do not want to be notified when disk space is running low. Otherwise, enter the number of bytes that will trigger a transition on a specific logical data point, thereby advising you that space is running low (see the Master
105
Protocol Common Concepts document for details). The maximum value you can enter is 2,147,483,647, and the default is 0.
You can provide a description of the folder, if you so choose.
Configuring the master protocol event file processing

Proceed as follows to specify where the master protocol is to store the event files that it retrieves from the device.
In the left pane:

Open the master protocol instance tree structure. Click Event Files. The event file has automatically been assigned a Name, based on the protocol. For example, an IEC 60870-5-103 event file is called a Disturbance Data File, a Hathaway BCM-200 event file is called a Breaker Operation Record, and a Hathaway DFR 1200 is called a Digital Fault Record. You cannot modify the name. The event file has automatically been assigned a Short Name, based on the protocol. To continue with the example, the 3 short names would be DDF, BOR and DFR, respectively. You cannot modify the short name. Put a checkmark in the Disabled checkbox if you want to disable the event file retrieval function, in which case you should not fill in the remaining boxes. By default, there is no checkmark since it is assumed that you will want to enable the retrieval. Choose a folder in the Folder drop-down list. This list contains the names of the system folders you defined previously. In the File Rule drop-down list, choose which event files the master protocol instance is to retrieve when it is launched during SMP startup: New files only Only those files that were generated since the last time a file was retrieved from the device. Files from last X days All files generated in the last X days, regardless of whether or not some of them may have already been stored in the system folder. If you choose this option, you must specify the number of days in the Max File Age box.
In the right pane:
All files All available event files, without restriction.
In the Max File Age box, specify a number of days. If you enter a 5, for example, and you had chosen Files from last X days for the File Rule, then all files generated in the last 5 days would be retrieved. In the Minimum Free Disk Space box, specify the amount of available disk space that has to be available in the system folder in order to store an event file. When there is less disk space available than what you have specified, the event files will stop being retrieved from the device. The maximum value you can enter is 2,147,483,647, and the default is 0. If you enter a value of 0, the available disk space will not be verified.
106
Optionally, you can enter some meaningful information in the Extra Info box, that will be appended to each event file name. Optionally, you can provide a description of the event files.
107
Creating an Annunciator interface
Introduction
The SMP Gateway Annunciator option provides a cost-effective solution to providing operators with an HMI for the substation. Using SMP Config, you can easily configure alarms on binary and analog data points, design simple display pages, and send the configuration to the SMP; you can then connect a touch screen directly on the gateway's video output and start using the Annunciator. The SMP Gateway Annunciator provides the following display pages:
The Alarms page displays the list of all active alarms, as well as alarms that have returned to normal but have not been acknowledged. The Readings pages, user-defined, that provide real-time display of values and states, minimal graphic capabilities, and control functions. The Blocked page that lists all the alarms blocked by the operator. The alarms History page displays the chronological list of previous alarms. The size of the alarm log is user-configurable. The alarm log is circular, with new alarms replacing the oldest alarms. The System State page provides access to SMP Gateway internal statistics and the current value of all data points, in a tabular format.
The SMP Tools automatically display the appropriate data whenever the Annunciator option is activated for a given SMP Gateway. SMP Config displays an Annunciator folder and SMP Stats provides Annunciator information. In the following sections, we will describe how to create and setup the Annunciator touch screen interface in SMP Config, then how to use the different display pages. Note: The Annunciator option is only available for the SMP 16/CP and SMP 16/SG gateways.
109
Configuring an Annunciator in SMP Config

The Annunciator is included in version 4 of the SMP Tools. Refer to SMP 16 or SMP 4, under Updating the SMP firmware, on page 188 to update the firmware if you need to. The following section walks you through the configuration of the Annunciator within SMP Config. To find out more about analog and binary setup or protocol setup, refer to the section Configuring the SMP on page 11.
Touch screen configuration in SMP Config

The touch screen has two cables: one cable for to the VIDEO connector of the SMP, the other one that connects to either a USB port on the SMP, or one of the serial ports. That second cable conveys the screen touching information; it is the equivalent of the mouse. If the cables are not connected, refer to the SMP 16 Installation Guide for the cables connection.
If a USB cable is used, the SMP gateway will see it automatically and no configuration will be necessary in SMP Config. If you are using a serial cable, you have to select the port in SMP Config and also enable it in Connections. Refer to the sections Configuring the serial port interfaces, page 35, for more information. You do not need to configure the port's operation, programming for this function is setting the parameters automatically.
Creating the Annunciator

To design the Annunciator, create its branch in SMP Config:

In SMP Manager, click the Tools menu and select SMP Config. In the SMP Config program, from the tree view, select Annunciator. In the Annunciator pane on the right, type a name for the Annunciator. For the illustration that follows the name is Bay Control. Click again the Annunciator branch to validate the instance, its name will appear, as illustrated in the following image:
110
Just like you would for a protocol, you configure the Annunciator branch by branch, from top to bottom, as described in the following sections.
Setting General parameters
Select General from the tree view and define the general settings: Field
Disable checkbox. Screen saver wait time Initial page
Description
You can disable the Annunciator in the SMP with this checkbox. Time, in minutes, before the touch screen connected to the SMP gateway goes into the screen saver mode. The initial page displayed in the Annunciator: Alarms, History, Blocked, Readings, System state. There is a relay output on the SMP gateway to trigger an output, typically an alarm buzzer, upon alarm. Check this box to use it. Select the time zone you wish to display. This does not affect the internal settings, you simply choose display preferences. Check whether you wish to display Daylight Saving Time or not. Select the date format you normally use. Select to display up to 1000 alarms in the Annunciator's Alarm History page.
Close relay contact on alarm Time zone
Daylight saving Date format History length
111
Setting Alarm inputs

Expand the Alarms branch to create the alarms you wish to manage in the Annunciator. Select Analog Inputs from the tree view and define the alarm settings: Field
Name
Description
Type the name of a previously defined analog input. If you used Subscribe To, the name of the subscribed point will appear in that field. Select if this alarm will be of major or minor importance. State at which level the analog reading becomes too low. Ex. : for 120-volt line, 100 volts. Because an analog value is graded, you must state at which level the analog reading becomes too high. Ex. : for 120-volt line, 130. The deadband is of how much the value must exceed or be lower than the high and low threshold. You can design an alarm for later purposes and disable it until you wish it to start using it. Type here what you want to display in the Description field of the alarm. When the high threshold of the alarm is reached, it will display it after the general alarm description. Type here what you want to display in the Description field of the alarm. When the low threshold of the alarm is reached, it will display it after the general alarm description.
Alarm level Low Threshold
High Threshold
Deadband
Disabled
High Threshold Description
Low Threshold Description
Select Binary inputs from the tree view and define the alarm settings: Field
Name
Description
Type the name of a previously defined analog input. Otherwise, it will display the subscribed point. Select if this alarm will be of major or minor importance. Filter for rapid transitions. Type length, in milliseconds, you wish the alarm condition to be on before the alarm is generated. For 3 seconds, type 3000. Filter for rapid transitions. Type the length, in milliseconds, you wish the alarm condition to be off before the alarm is turn off. For 3 seconds, type 3000. If you wish to trigger the alarm upon a 0 instead of a 1, activate the Inverted box. You can design an alarm for later purposes and disable it until you wish to start using it.
Alarm level Appearance Filter
Disappearance Filter
Inverted
Disabled
112
Description
By default, nothing is displayed. You can type here what you wish to see in the Description field of the alarm message.
Annunciator Pages editor

In the last section, alarm input points were conceived in SMP Config, as well as general parameters. You will now map them on the grid of the Annunciator Readings page and design the screen's layout. A finished design could look like this:
In SMP Config's tree-view, under Annunciator, select Readings. If pages are already created, they will be listed in the right pane. You can disable the pages you do not wish to display in the Annunciator right now. From the Tools menu, select the Edit Annunciator pages command. The Alarms tab of the Annunciator page editor appears.
113
The Alarm tab

When you select the Edit Annunciator pages command from the Tools menu, the following dialog box appears:
Element
Alarm list order group box Oldest alarm at top
Description
Select in which order you wish alarms to appear. Select this option button if you deal with each alarm in order and work them down to the most recent. Select this option to deal with alarms as they occur. The single-alarm display appears at the bottom of all screens in the Annunciator. This group box allows you to choose what to display in it. Select this option button to see the oldest unacknowledged alarm in the single alarm display. Select this option button to see the most recent unacknowledged alarm in the single alarm display. Choose the way alarms are acknowledged.
Most recent alarm at top Single alarm display group box
Show oldest unacknowledged alarm Show most recent unacknowledged alarm Alarm acknowledgement group box Alarms can be acknowledged and recalled in any order
Select this option button to be free to acknowledge and recall any alarm. In that case, you need to select the alarm then acknowledge or recall.
114
Element
Alarms must be acknowledged and recalled in the order they occurred Alarm state group box
Description
Select this option button to only acknowledge and recall alarms in the order they occur.
This group box allows you to set colors if you wish for all the types of available alarms in the Annunciator. Select colors for these four alarm states, for minor and major alarms: Active Unacknowledged Active Acknowledged Return to normal Unacknowledged Return to normal Acknowledged
Alarm state
Major alarm
Unacknowledged major alarms are usually red, to make sure they are seen. Unacknowledged minor alarms are usually yellow. Click Reset Colors to set the colors back to the default settings. In this group box, you will see the result of the selections made in the Alarm tab for the Alarms page as well as for single alarm display that can be viewed at all times in the Annunciator.
Minor alarm Reset Colors
Preview group box
115
The Readings tab

When you are done setting the parameters of the Alarm tab, click the Readings tab:
Reading pages are composed of a grid of 18 lines by 9 columns. Element

Page list
Description
All the configured pages can be found under page list. The title of each page will appear at the top of each page. When in the Annunciator, all the pages will be displayed and the same way Microsoft Excel sheets are displayed, and there will be arrows to scroll them. Click this button to add a new page of readings to display in the Annunciator. Select a page in the page list and click this button to remove a readings page from the Annunciator. Select a page in the page list and click this button to rename it. The grid is where you design the actual interface. Its cells and the different configurations you can select are described in the next sections. Click in one or several header cells to select one or several
Add button
Remove button
Rename button
Grid
Grid headers
116
Element
Description
lines.
Click a cell in the grid to define your new reading. Each cell in the grid can display one or more of the following:

A static text. The value of an SMP gateway data point, analog or binary.
The following display attributes can be selected:

Text display color Background display color
When displaying binary inputs, the additional display attributes are available:

Text label for states 0 and 1. Text and background color for states 0 and 1.
In the following sections we describe how to use these capabilities to create displays and simple diagrams.
Setting cell contents

To set the contents of a cell:
Click the cell to display the cell properties dialog box.
To set the contents of all cells in a row or a column:
Click the row or column header to display the cell properties dialog box.
117
Note: When selecting a complete row or column, it is only possible to set the background color and font.
Displaying static text or colors

Static text allows you to place words wherever you wish in the cells, in the desired colors for letters and backgrounds. This way you can also make the screen look like a control center's, add descriptive text next to the cell of each alarm and much more. To add static text and colors:
118
Click the cell to display the Cell Properties dialog box. In the General tab, select Display static text.
Field
Text
Description
Enter text to be displayed. Use the Font tab to select the display font. There is space for about 12 characters in a cell. If you type more, it will spill in the cell on right, unless you change the alignment to left or center. You will not see it in the design interface, but if you send it to the SMP it will display as you asked in the Annunciator. The text field can be left empty if you simply want to change the cell color.
Text color Background color
Select the text display color. Select the cell background color.
To change colors of a group of cells:

Drag the mouse on the area you wish to change: a blue square will display the selection. When you release the mouse button, the Cell Group Properties dialog box appears. This dialog box lets you set the font and colors for the group, then you can configure individual cells within the group and the rest of the group will remain the way you set it.
Displaying analog data points
Click the cell to display the cell properties dialog box.
119
In the General tab, select Display analog data point.
Field
Data point
Description
Select the data point to display. The choice is limited to analog inputs. The Annunciator will display the scaled value of the data point with 2 decimal digits. Use the Font tab to select the display font. There is space for about 12 characters in a cell. If you type more, it will spill in the cell on right, unless you change the alignment to left or center.
Normal state
Text color: Select the color to display the value when the data point is valid and not in alarm condition. Background color: Select the cell background color when the data point is valid and not in alarm condition. Text color: Select the color to display the value when the data point is in alarm condition. Background color: Select the cell background color when the data point is in alarm condition. Flash: Check this box to flash the value whenever the data point is in an alarm condition. Text color: Select the color for values when the data point quality is bad.
Alarm
Quality
120
Displaying binary data points

Click the cell to display the cell properties dialog box. In the General tab, select Display binary data point.
Field
Data point State 0 or State 1
Description
Select the data point to display. The choice is limited to binary inputs. Text label: Enter a text to display when the value of the binary input is 0 for State 0 or 1 for State 1. Default value is 0 for State 0 or 1 for State 1. There is space for about 12 characters in a cell. If you type more, it will spill in the cell on right, unless you change the alignment to left or center. Text color: Select the color to display the value when the data point is valid and not in alarm condition. Background color: Select the cell background color when the data point is valid and not in alarm condition. Flash: Check this box to flash the display whenever the data point value is 0 for State 0 or 1 for State 1. Only one flashing state can be selected. Text color: Select the color to display the value or text when the data point quality is bad. Background color: Select the cell background color when the data point quality is bad.
Quality
Formatting groups of cells

To format several cells at once:
Select them using a cell headers, 121
or
Drag the mouse on the two corners of the square of cells you wish to select:
When you release the mouse button, the Cell Group Properties dialog box will appear:
122
Selecting the display font

Three fonts are available for each cell, in a variety of formats. To change the font:

Click a cell to display the Cell Properties dialog box. Select the Font tab.
Field
Font Style Alignment
Description
Select the display font for the cell. Select the display style: add italic or bold or both. Select the cell alignment. If more than approximately 12 characters are in the cell, it will spill into another cell. If it is left-aligned, it will spill to the right cell, if it is centered it will spill on both sides, and if it is right-aligned, it will spill into the cell on the right. You will not see the missing letters in SMP Config, but it will appear with the Annunciator. Select the font size.
Size
Note: Windows CE only supports a limited number of fonts and display styles.
123
Connecting to the Annunciator option into the SMP gateway

You should now be ready to see the resulting design. To use the Annunciator in the SMP Gateway:

Save the configuration file in SMP Config. Send it to the SMP gateway: from SMP Manager, in the Gateway menu, select Send configuration file. SMP Manager will display the Restart Gateway xxx dialog box. Select Shutdown and restart and click OK. On the touch screen you will see the SMP startup and eventually, the screen should become totally black. The Annunciator will be displayed a few seconds later, but it could take one or two minutes. You will be asked to calibrate the touch screen, as explained in the next section. In SMP Manager you will see the booting sequence, when the LEDs all become green the touch screen for the Annunciator will become white.
Calibrating the touch screen

The Annunciator screen will not be displayed on the touch screen until the SMP configuration file featuring the Annunciator design is sent to your gateway. Therefore you have to perform the touch screen calibration. When the screen becomes white, a cross will appear in one of the corners of the touch screen. Calibration can be accessed two ways: upon startup of the SMP gateway and by pressing the Calibration button at the bottom of the screen. Once you are in calibration mode:

A cross will appear in a corner of the screen. A message will prompt you to touch the screen from a position of normal use. This means that you should be in your normal working position; either sitting down or in front of the rack standing up, but as you should normally. Touch the crosses as they appear on-screen. When this is over, a message will appear, asking if the cursor follows you fingers. Whether you press yes or no you will be taken to the Annunciator and you can recalibrate as needed.
124
Using the Annunciator Interface

The screen is composed of 5 tabs:
The Alarms page displays the list of all active alarms, as well as alarms that have returned to normal but have not been acknowledged. User-defined Readings pages that provide real-time display of values and states, minimal graphic capabilities, and control functions. The Blocked page that lists all the alarms blocked by the operator. The alarms History page displays the chronological list of previous alarms. The size of the alarm log is user-configurable. The alarm log is circular, with new alarms replacing the oldest alarms. The System State page provides access to SMP Gateway internal statistics and the current value of all data points, in a tabular format.
Navigation
The large arrow key buttons allow you to move from one line to another when it is too small for fingers. To change pages, simply press the tab's name.
Interface displayed in all the pages
At any time you can press Calibrate to readjust the touch screen, if, for example, you change your working position from sitting to standing. UTC time and date are displayed beside it. At all times on the top left corner you can see the number of alarms and how many are blocked. Single alarm display:
At the very bottom, you will see either the oldest or newest alarm, according to what was selected in SMP Config. Press it once to clear the alarm sound, twice to acknowledge. If this alarm has several occurrences, a x will be displayed in the icon column.
The Alarms page

The Alarms page is where all the alarms are listed, and where you can take action on them.
125
Element
Icon column
Description
In this column, the alarm type can be quickly determined: A red A is for an appeared alarm, a green R is for a disappeared alarm, an x beside the letter means that this alarm is a multiple alarm.. Text entered in the description fields of the binary and analog alarms in SMP Config. The date and time the event occurred, displayed in the format you selected in SMP Config. Press Clear Sound to clear the sound warning system. Press Acknowledge, in order to acknowledge a specific alarm. You have to remember that the process is configured in SMP Config: you could select whether you have to acknowledge in order or not, and if the events appear from the newest to the oldest or the opposite. Press Clear, in order to clear the alarm display of the data point that has returned to normal. You have to remember that the process is configured in SMP Config: you could select whether you have to acknowledge in order or not, and if the events appear from the newest to the oldest or the opposite Press General Ack./Clear to acknowledge all newest or oldest alarms and clear the alarm display of all data points that have returned to their normal condition Press Block at any time to stop the alarm sound and move it to the Blocked
Description
Date, time
Clear Sound button Acknowledge button
Clear button
General Ack./Clear button
Block button
126
page. Arrows Use the arrows to navigate up or down in the alarms list.
How the Annunciator processes the appearance of alarms

When an alarm condition is detected, the Annunciator performs the following actions:

A sound warning system is turned on to let you know that an alarm condition has occurred. The data point is added to the Alarms page. If you chose the alarm color defaults in SMP Config, a red symbol with the letter "A" is displayed in the Icon column to indicate the appearance of the alarm condition. The color of the display line indicates the severity of the alarm, with high priority alarms shown in red and low priority in yellow.
Acknowledging alarms
When an alarm occurs, you must first clear the sound warning system before you can acknowledge the alarm. The sound warning system also acts as an interlock, ensuring that you are aware of all the alarms that occur.
Press Clear Sound to clear the sound warning system.
Depending on the options you have selected in SMP Config, you can:
Press General Ack./Clear to acknowledge all new alarms and clear the alarm display of all data points that have returned to their normal condition. 127
Or,
Select a particular alarm and click Acknowledge. Whenever you acknowledge an alarm, the entire line turns a paler shade of its original color.
Or,
Press Block at any time to stop the alarm sound and move it to the Blocked page.
The data points that are in an alarm condition remain in the alarm display until the condition disappears, at which time you can clear them from the display.
How the Annunciator processes the disappearance of alarms

The Annunciator also notifies you when the alarm condition returns to normal.

The sound warning system is turned off again. The red "A" symbol beside the data point is replaced by a green "R" symbol, to let you know that the alarm condition has returned to normal. The entire line also turns green.
Acknowledging the disappearance of alarms

You must once again clear the sound before you acknowledge that the alarm condition has returned to normal. You can then clear the alarm point so that it is no longer displayed in the Alarms page.
Click Clear Sound to clear the sound warning system.
Click General Ack./Clear to acknowledge all alarms and clear the alarm display of all data points that have returned to their normal condition.
Or,
With the arrows, select a particular alarm and press Acknowledge, in order to acknowledge a specific alarm. Press Clear, in order to clear the alarm display of the data point that has returned to normal.
Note that some alarms can never be deactivated or return to normal. You can acknowledge the alarm, but you cannot clear it from the display.
Multiple alarms
Alarms are displayed differently on the Alarms and Events pages. On the Alarms page, alarm appearances and disappearances are displayed on the same line, as are multiple instances of an alarm. When an alarm appears and disappears more than once without being cleared, the "A" or the "R" symbol in the column indicating the state of the alarm has an "X" in the bottom right corner. This makes it easy for you to distinguish between single and multiple alarms, since multiple appearances and disappearances are always displayed on the same line.
128
The Readings page

The Readings page displays the points that you mapped in SMP Config.
You can page through the different Readings page, with the arrows, if you designed several of them. You will keep seeing the single-alarm display at the bottom. The title of the page, in the top middle section of the page, is the name you typed when you clicked Add in the Alarms tab, in the Annunciator pages editor.
The Blocked page

The Blocked page is similar to the Alarms page but contains only the blocked alarms. You can reactivate one, or all of them, using the arrow button to scroll to them.
129
Element
Name Description
Description
The alarm name, as configured in SMP Config. Text entered in the description fields of the binary and analog alarms in SMP Config. The date and time the event occurred, displayed in the format you selected in SMP Config. Press the Reactivate button to clear the sound warning system. Press the Reactivate All button, to send all the alarms back to the Alarms page. Use a single arrow to go down one line, a double arrow to go to the bottom or the top of the list.
Date, time
Reactivate button Reactivate All button
Arrows
The History page

This page displays the alarms and operator actions. The additional column, T, stands for the alarm type, where O is operator and A is alarm. You can toggle types on or off from the display by pressing either one or both types at the bottom left corner.
130
Element
Date, time
Description
The date and time the event occurred, displayed in the format you selected in SMP Config. Type of intervention in the log. If the occurrence in the history is an alarm, it will display A; if it is an operator's action it will display O. Text entered in the description fields of the binary and analog alarms in SMP Config. Toggle on or off alarm events and operator events when you click these two buttons. Use a single arrow to go down one line, a double arrow to go to the bottom or the top of the list.
Description
Type to display toggle buttons Arrows
System States page

The System States page contains information on the SMP gateway and the data points. The data points section concerns specific users or instances. Two sets of arrows are available: one for the tree view and one for the statistics section.
131
Element
Left pane
Description
In the left pane, select a type of information you wish to display. This information varies according to the options and the alarms designed in SMP Config. The right pane contains the detailed information of the type selected in the left pane. You will find statistics, software and hardware information, protocol information, varying according to the options in your gateway. There are two sets of arrows, one for the left pane and one for the right pane. Use a single arrow to go down one line, a double arrow to go to the bottom or the top of the list.
Right pane
Arrows
132
The SMPs automation functions
Introduction
Since it is connected between the substation devices and the control centers, the SMP gateway is well positioned to implement advanced processing functions that would be impossible to perform in less sophisticated devices. The SMP gateway provides the following automation capabilities:
The SMP Automation Functions module, to add basic automation functions. See The SMP Automation Functions module, next. The Soft PLC module and CoDeSys development platform, to create sophisticated automation scripts, such as closing circuit breakers and load balancing. See The Soft PLC, page 145.
The SMP Automation Functions module

The SMP Automation Functions module is an optional software package designed to extend the capabilities of existing devices by adding local automation capabilities similar to what could be implemented using an external PLC. The module adds the following functions to the SMP gateway:
The Analog Control function, which performs a control operation on a physical analog output point, based on the value change of a physical input point. It writes the value of an input point to an output. A deadband value, in engineering units, can be specified so that only changes that exceed the deadband value will trigger a control operation. A time filter, in milliseconds, can be applied to value changes of the source point, to prevent control operations from being triggered on transitions of short duration. Analog Latch and Reset is similar to Binary Latch and Reset. It allows you to capture transitional values on analog input points. The Best Of function, which makes a logical input or output point an exact replica of the best source point available of the same type. The evaluation of the best source point is based on quality. An exact replica involves the support for redundant devices: value or state, the quality
133
and the timestamp. Furthermore, if the best of operation involves output points, the requested command is sent to the best source point.
The Binary Control function, which performs a control operation on a binary output point, based on the state change of a binary input point. A millisecond time filter can be applied to value changes in the source point, to prevent control operations from being triggered on transitions of short duration. The Binary Debouncing function is the answer to a typical binary signals problem, by filtering short-term transitions, considered as non-significant. The Create function, allows you to creates a logical analog or binary input point that acts as a data holder. The only way to modify the data point is by using a Force operation, using the Force function. A validity delay can be specified to define a refresh period after which the value of the created point must be refreshed to maintain a valid status. If the value is no longer refreshed using the Force function after this delay, the point inherits the bad quality status. This function, in conjunction with the Force function, allows a slave to update a input point value (binary or analog) that can be read by any other slave. The Force function, which forces the value or state of an analog or binary input point, based on control operations performed on force and unforce output points created by the function. The Grouped Control function, which performs a control operation on a group of output points, based on the value or state change of an analog or binary control point. The Inhibition function, which uses a logical output point to control a group of physical output points for the purpose of enabling or disabling control functions. This function can also be used with physical input points, in which case it enables or disables reporting of transitions for those points. The Input Latching and Reset function, which changes the state of a logical input point, called a latched point, whenever it detects a transition or pulse on a physical binary input point. The latched point remains on until either a reset operation is done on a binary output reset point or an internal timer expires. Optionally, the control operation on the reset point can also apply to a physical binary output point called the controlled point. The Logical function, which dynamically computes an AND or OR operation on a group of binary input points. The result of this computation is stored in a logical binary input point. The Logical Processor defines logical data points which values are based on calculations performed on physical points that you build in the Logical Editor, to process existing points through different operations described further. It is a much more elaborated version of Logical.
Adding an Automation Functions instance

Proceed as follows to add an Automation Functions instance using SMP Config:

In the left pane, click Automation Functions, under Master Protocols. In the right pane, assign a name to the new instance.
The new instance appears in the left pane.
134
As shown in the screenshot, the newly added instance includes the following items:

General settings, which set the general behavior of the component. Settings for various data point types. Initially, there are no data points. You will create logical data points for each function you set up. You will then specify the settings for each of these logical data points. Functions. All the currently supported functions appear in the list. You will define specific functions of these various types, and these functions will refer to logical data points.
In the left pane, click General. Enter a prefix in the right pane. This prefix must be unique for each Automation Functions instance.
Defining an automation function

Each instance includes one or more automation functions, such as Best Of, Force, Create, and so on. The procedure next shows you how to define a Best Of function, but the process is similar for all the various types of functions.
In the left pane, under Functions, click Best Of.
The right pane shows the settings you need to enter for the Best Of function.
135
The Best Of function makes a logical input or output point an exact replica of the best source point available of the same type. The logical point is referred to as the result point.

In the right pane, enter a name for the function. Define the result point:
In the left pane, click the type of data point you want for the result point. For the sake of example, click Analog Inputs, and then on Logical Inputs. Thus, the result point will be a logical analog input point. In the right pane, enter a name of your choice for the result point. Let us call it Best Of Result Point, and enter its settings: scale, offset, units, etc. In the left pane, click again on Best Of. In the right pane (see previous screenshot), choose Best Of Result Point in the Result Point drop-down list.
Define the first source point:
Enter the name of the point in the First Point box.
Or,

Enter the name of the point in the Put the cursor in the First Point box. In the Tools menu, click Select Points. In the Select Points dialog box, choose the first source point to which you want to subscribe. This point has to be an analog input point, to match the data point type of the result point. In our example, we selected an analog input point on a DNP3 device. This point represents the phase A current. Click Paste to have the point appear in the First Point box.
136
Define the second source point: Enter the name of the point in the First Point box. Or,

Without closing the dialog box, put the cursor in the Second Point box. In the Select Points dialog box, choose the second source point to which you want to subscribe. This point also has to be an analog input point, to match the data point type of the result point. In our example, we chose an analog input point on a MODICON MODBUS device, which represents the phase A current, as did the DNP3 point. Click Paste to have the point appear in the Second Point box.
Enter a description of the automation function, if you so choose.
The screen is shown next.
The Best Of function will choose the better of the 2 source points, and put the result in the result point. Note: In the example, we subscribed to device data points, but we could have subscribed to any data point available in the SMP gateway. SMP Gateway User Manual 137
Understanding automation function settings

Complete documentation on the automation functions is available in the Application Notes folder, in the document called SMP Automation Functions.
Logic Processor
SMP Config enables you to derive a data point through a mathematical expression that includes existing data points. For instance, you may want to export the value of a certain power aspect such as phase imbalance but no such data point is available. If data points are available for voltage and current, you can simply define three new data points calculated as the voltage times the current for each phase, then check power imbalance between the three points. The expression for deriving a calculated data point can be evaluated in one of two ways:
By exception Whenever there is a transition on the data points included in the expression. If you choose this option, you also specify whether the evaluation is to be triggered by a specific data point or by any data point in the expression. Periodically Every X milliseconds.
You can choose to have the expression evaluated either by exception or periodically, or both. If you choose both, the expression will be evaluated once every X milliseconds as well as anytime there is a transition on a data point or signal used in the expression. If you do not choose either methods, the expression will be evaluated only once, on startup of the SMP Manager. Note: This function is not available in the SMP 4-20 and the SMP 8-40.
To create a calculated data point:
In the left pane, at the bottom of the automated functions list, expand Functions and rightclick Logic Processor. In the shortcut menu, select Logic Editor.
SMP Config displays the Logic Editor dialog box.
138
The Logic Editor is used to enter the expression that generates the value of the calculated data point. It is displayed across several windows, which allow you to set the attributes of the calculated data point and assist you in editing the expression. Use the toolbar at the top of the dialog box to validate, save and close the expression, or to undo the last change to the expression. The table below describes the various areas of the dialog box: Window
Properties
Description
Used to specify the different attributes of the calculated data point. These attributes are described in the sections below. Used to select and enter existing data points in the expression. You can select data points from the list of available data points. These are grouped together in folders, based on grouping criteria that you established with the Group Settings tab of the Display Options dialog. If you open the various folders, you will note that binary points are displayed in blue, while analog points are displayed in green. The list is a memory jogger for selecting I/O points to be used in the expression. Double-click on an item to insert it at the cursor location in the expression window.
Data Points
Functions
Displays the list of all the functions that can be inserted in the expression. Double-click on an item to insert it at the cursor location in the expression window. The various functions are described in the sections below. Displays the list of all the operators, constants and variables that can be inserted in the expression. Double-click on an item to insert it at the cursor location in the expression window. The various operators are described in the sections below.
Operators
139
Window
Expression (empty window at the bottom of the application window)
Description
Used to enter and edit the expression to be evaluated. You can enter the expression directly from the keyboard or use the memory-jogging windows described above. The result of the evaluation of the expression is assigned as the value of the calculated data point.
A calculated data point has the following properties: Properties

Produced point Name
Description
Resulting data point. Name of the calculated data point for which the expression is currently being edited. This field cannot be edited. To edit an expression for another calculated data point, close the editor and select another data point in one of the analog or binary point pages in the Site view. Optional space for you to type a description of the new point. Defines how the calculated data point is to be time-stamped. Specify "Server" if you want the system time to be used as the timestamp, and specify "Triggered point" if you want the timestamp to be the time of the point that triggered the calculation. By default, the calculated data point is time-stamped by the Visual Substation server.
Description Timestamp
Time-based
Specifies whether the expression is to be evaluated on a periodic basis. The time interval is then specified via the Time interval attribute. Normally, expressions are not evaluated on a periodic basis. Specifies that the expression is to be evaluated every X milliseconds. This time interval applies only if the Time-based attribute specifies "Yes". The minimum value is 50 ms. If this condition is Specifies whether the expression is to be evaluated whenever there is a transition on one of the data points or signals in the expression. Specifies whether the evaluation of the expression is to be triggered by a single data point ("Yes") or by any data point ("No") in the expression. This attribute is ignored if By exception is set to "No". Used to specify the name of the data point or signal that will trigger the evaluation of the expression. This attribute is ignored if Specific trigger is set to "No".
Time interval (ms)
By exception
Specific trigger
Triggered by
Data point names in expressions

To use a data point in an expression, simply enter the name of the data point. Make sure to include the prefix, if applicable. A data point name used in an expression must adhere to the following Visual Basic-like notation:
140
It must begin with a letter. It can include alphanumeric characters (A-Z, a-z, 0-9), the underscore separator " _ " (without the quotes), and special characters, such as a period.
If the data point name contains a special character, it must be surrounded by the delimiter character ". For example, a physical data point name of T5.APHA must be declared as "T5.APHA". Here are some examples of valid expressions: 120 + ( CurrentPoint * 0.02 * ( Rand() - 1 ) ) ( 0.85 "T5.APHA" * "T5.KVAB" ) / 1000 "1B17.MA" AND ("120-1.MA" AND NOT "120-1.MB" ) AND "1B1.MA" Imbalance("T5.APHA", "T5.APHB", "T5.APHC")
Comments in expressions
Expressions can span several lines. To insert a comment into an expression, put a single quote at the beginning of the line. For instance: ' Calculates the imbalance of transformer #5 Imbalance("T5.APHA", "T5.APHB", "T5.APHC")
Condition statements
You can use the following condition statements in expressions: Statement
If <condition> Then <expression> Endif IF <condition> Then <true expression> Else <false expression> Endif
Description
Evaluates the specified expression if the logical condition is true.
Evaluates the expression specified after the "THEN" if the logical condition is true, or evaluates the expression specified after the "ELSE" if the logical condition is false. Note that the expression can contain several embedded IF and ELSE statements, in which case each ELSE statement is associated with the IF statement closest to it.
Mathematical functions
You can use the following built-in mathematical functions in expressions: Function
Abs( x )
Description
Calculates the absolute value of x.
141
Function
Pow( x, y ) Sqrt( x ) Exp( x ) Log( x ) Sin( x ) Cos( x ) Tan( x ) ArcSin( x ) ArcCos( x ) ArcTan( x ) Min( x, y ) Max( x, y )
Description
Calculates the value of x to the power of y. Calculates the square root of x. Calculates the value of e raised to the power of x. Calculates the logarithm of x to the base 10. Calculates the sine of angle x, expressed in radians. Calculates the cosine of angle x, expressed in radians. Calculates the tangent of angle x, expressed in radians. Calculates the arcsine of angle x. Calculates the arccosine of angle x. Calculates the arctangent of angle x. Compares the values of x and y, and retains the lesser of the two. Compares the values of x and y, and retains the greater of the two.
Data point functions

You can use the following built-in data point functions in expressions. Function
Imbalance( point A, point B, point C )
Description
Calculates the imbalance among three phases, for the current represented by the three data point names. The calculation is defined as follows for a three-phase current: ((Imax - Imin) / Iavg) * 100 where: Iavg = (AI + AB + IC) / 3 Imax = max (IA, IB, IC) Imin = min (IA, IB, IC)
IsEqual( point1, point2, precision )
Compares point1 and point2, to the nearest precision significant digits. The expression evaluates to TRUE or FALSE, depending on whether or not point1 = point2.
IsTrigger( point )
Evaluates to TRUE if the specified point causes the expression to be reevaluated. Evaluates to TRUE if the value of the specified data point is
QualityOf( point )
142
valid. TimestampOf( point ) Returns the timestamp of a point, as a number of milliseconds that have elapsed since an internal reference date and time. Use this function for the sole purpose of comparing timestamps that were obtained via a previous call to the TimestampOf() or TransitionTimestamp() function. Sets the quality of a data point to bad. That is, the value of the data point cannot be assumed to be correct.
BAD_QUALITY
Generators
You can use the following built-in generators in expressions. Generators are used to mathematically generate input values for data points. Generator
Sine( amplitude, frequency, phase )
Description
Generates an expression of the form: Sine( A, f, P ). Calculates the value of a sinusoid with an amplitude A, a frequency f in hertz, and an initial phase P in degrees. P is optional and if you don't specify it, it will be assigned a value of 0.
Pulse( amplitude, frequency, duty cycle, delay )
Generates an expression of the form: Pulse( A, f, dc, d ). Calculates the value of a pulse stream with an amplitude A, a frequency f in hertz, a duty cycle cd in percent, and a delay of d milliseconds. d is optional and if you don't specify it, it will be assigned a value of 0.
Saw( amplitude, frequency, delay )
Generates an expression of the form: Saw( A, f, d ). Calculates the value of a sawtooth wave with an amplitude A, a frequency f in hertz, and a delay of d milliseconds. d is optional and if you don't specify it, it will be assigned a value of 0.
Randn( mean, variance )
Generates an expression of the form: Randn( mean, var ). Calculates a random value with a normal distribution that has a mean value of mean and a variance of var.
Rand()
Generates an expression of the form: Rand( ). Calculates a random value with a uniform distribution ranging between 0.0 and 1.0.
Arithmetic operators
You can use the following arithmetic operators in expressions:
143
Operator
+ [Add] - [Subtract] * [Multiply] / [Divide] ( [Opening parenthesis]
Description
Calculates the sum of the left and right operands. Calculates the difference between the left and right operands. Calculates the product of the left and right operands. Divides the left operand by the right operand. Expressions are evaluated according to standard operator precedence. Parentheses are used to group sub-expressions and control the order in which expressions are evaluated. 1 + 2 * 3 evaluates to 7 (1 + 2) * 3 evaluates to 9
) [Closing parenthesis]
Expressions are evaluated according to standard operator precedence. Parentheses are used to group sub-expressions and control the order in which expressions are evaluated. 1 + 2 * 3 evaluates to 7 (1 + 2) * 3 evaluates to 9
Binary operators
Binary operators are used to manipulate the individual bits of expressions or data points. You can use the following binary operators in expressions: Operator
BAND
Description
Calculates a bitwise AND between the left and right operands. For instance, 12 BAND 5 evaluates to 4 (1100 BAND 0101 is 0100).
BOR
Calculates a bitwise OR between the left and right operands. For instance, 12 BOR 5 evaluates to 13 (1100 BAND 0101 is 1101).
BNOT
Calculates a bitwise NOT of the value to the right. For instance, BNOT 0 evaluates to -1 (BNOT 0000 is 1111).
BXOR
Calculates a bitwise XOR between the left and right operands. For instance, 12 BXOR 5 evaluates to 9 (1100 BXOR 0101 is 1001).
BEQV
Calculates a bitwise EQV between the left and right operands. For instance, 12 BEQV 9 evaluates to 6 (1100 BEQV 0101 is 0110).
144
Logical operators
Logical operators are used to combine the results of logical expressions such as comparisons. You can use the following logical operators in expressions: Operator
AND OR NOT XOR EQV
Description
Evaluates to TRUE if the left and right operands are both TRUE. Evaluates to TRUE if either the left or right operand is TRUE. Evaluates to TRUE if the value to the right is FALSE. Evaluates to TRUE if the left and right operands have different values. Evaluates to TRUE if the left and right operands have the same value.
Relational operators
You can use the following relational operators in expressions: Operator
< [Less than] > [Greater than] <= [Less than or equal to] >= [Greater than or equal to] = [Equal to] != [Not equal to]
Description
Evaluates to TRUE if the left operand is less than the right operand. Evaluates to TRUE if the left operand is greater than the right operand. Evaluates to TRUE if the left operand is less than or equal to the right operand. Evaluates to TRUE if the left operand is greater than or equal to the right operand. Evaluates to TRUE if the left operand is equal to the right operand. Evaluates to TRUE if the left operand is different from the right operand.
Constants and Variables

You can use the following built-in constants and pseudo-variables in expressions: Operator
CurrentPoint [Point value]
Description
Represents the current value, i.e., the value of the logical point being edited, just prior to its evaluation.
The Soft PLC

The Soft PLC is an optional software module available on all models. Using this module, you can create automation scripts that access the data points in the SMPs real-time database in order to create sophisticated control functions.
145
Since the Soft PLC is part of the SMPs internal architecture, the scripts you define can be used to:
Create new logical data points, with values based on the result of calculations performed on real data points. Process data in real time before sending it to control centers. Implement sophisticated local automation functions, such as automatic closing of circuit breakers and load balancing.
The Soft PLC module is provided with the CoDeSys development platform, a complete development environment that supports the IEC 61131 programming languages:

Instruction List (IL) Structured Text (ST) Function Block Diagram (FBD) Continuous Function Chart (CFC) Ladder Diagram (LD) Sequential Function Chart (SFC)
The CoDeSys development environment

CoDeSys is one of the most popular IEC 61131-3 programming systems for PLCs and industrial controllers. It supports the full range of standard IEC 61131-3 data types, as well as user-defined data types: arrays, structures, enumerations, aliases and pointers. The tools provide a comfortable programming environment, with full debugging support.
146
Using CoDeSys to create SMP automation scripts

While a detailed description of how to create automation scripts is beyond the scope of this document, the process can be summarized in the following steps:

Install the CoDeSys development system on your PC. Start CoDeSys and install the SMP Target Support Package. A Target Support Package (TSP) contains all the files and configuration information necessary to control the SMP from a program created in CoDeSys. Add the SMP Library to the CoDeSys project. This library contains all the information necessary to access the SMP components from a programming language. Create your automation script using one of the IEC 61131-3 programming languages. Connect the CoDeSys development platform to the SMP. Load the script on the SMP and use the CoDeSys advanced debugging features to test and debug the script.
For complete details on using CoDeSys to create scripts for the SMP Soft PLC module, see SMP Gateway PLC User Manual, GUI-00316-00003-T.
147
Using syslog with an SMP gateway
Introduction
Typically used for computer system management and security auditing, syslog is supported by a wide variety of devices and receivers across multiple platforms. Because of this, syslog can be used to integrate log data from many different types of systems into a central repository (source: http://en.wikipedia.org/wiki/Syslog). It is then possible for the system administrator to dispatch these messages to e-mail or SMS systems, for example. With the SMP gateway, you can start using the UDP syslog protocol as soon as you define it in SMP Config and that the parameter file is sent to the gateway. Your syslog server will then start receiving logs from the gateway. The next section explains the quick procedure to make it possible.
Setting up SMP Config for syslog messages

For the SMP gateway, the procedure consists in setting up a syslog client, where you associate SMP Log folders with syslog Facility messages:

In SMP Manager, from the Tools menu, select SMP Config to open it. In the left pane, under your SMP gateway's name, expand the System branch. Select the Syslog branch and type an appropriate name. In the following example, the name is Main Syslog server.
149
Expand the branch you just created. Select the General branch and select the time zone. This is the time zone used by the server. You can also select Auto Adjust DST, for daylight saving time schedule adjustments. Select the Receiver branch and type a name and the server's IP address. Leave the port numbers to default, that is 514. Select the Facilities branch, the default settings, as illustrated above, should suffice your needs. This is where your assign syslog messages to SMP Log folders. If you need to know more, open SMP Log and look at the log's content. You can also refer to the section Information provided by SMP Log on page 45.
150
Redundancy
Introduction
The SMP gateway is a critical component in a substation automation system. Hence, there are circumstances in which losing an SMP gateway can severely impact substation operations. With the redundancy option, you can group 2 SMP gateways together in a redundant configuration, to ensure continued operation of the substation automation system in the event of a failure. If one SMP fails, the other one takes over. There are different types of redundancies - IEDs, SMPs, networks- can be redundant, in many combinations. Redundant SMPs are addressed by a SCADA center as if they were a single SMP with a single IP address. In the event that one SMP fails, the second SMP immediately becomes active and takes ownership of the logical IP address. Failover from the active SMP to the standby SMP typically takes less than 5 seconds. Network connections from the control center are temporarily lost when the active gateway goes offline. The control center simply needs to reconnect to the same group IP address in order to re-establish a new connection and restore system operation. An additional benefit is that you can update SMP settings with minimum down time. Note: The redundancy function is not available on the SMP 4.
Redundant group operation

In an SMP redundancy group, one SMP plays an active role while the other stands by. The active SMP polls the substation devices and responds to requests from control centers. The standby SMP initializes itself, places its serial links in a high-impedance state and waits to become active.
151
2 COMMUNICATION FAILURE
2 COMMUNICATION RESTORED
COMMUNICATION OPTIONAL
The active SMP uses a special protocol to send regular heartbeat messages to the standby SMP. If the standby SMP fails to receive these messages, it automatically assumes that it should become active. 2 distinct communication channels are used for the heartbeat messages, to minimize the chances of both SMPs becoming active due to a single faulty connection. These channels can be LAN connections, dedicated serial connections, or a mixture of both. The 2 SMPs in a group must have identical configurations and be physically connected to the same substation devices. The active SIOM, which comes as an option with the SMP 4-20 and SMP 8-40, also supports redundancy and can therefore be used to connect serial devices to 2 redundant SMP 4-20s or SMP 8-40s.
Redundant IEDs
When needed, breakers can be monitored and controlled by multiple protection relays to make sure that a fault is always detected; normally different relays from different manufactures are used. To report the only one data set to the control centre the SMP has the Best of automation function (see The SMP Automation Functions module on page 133).
152
ACQUISITION OVER TWO LINKS TO TWO DEVICES. INFORMATION FROM PRIMARY SOURCE IS PREFERED.
SECONDARY SOURCE INFORMATION IS USED. TRYING TO RESTORE COMM. WITH PRIMARY SOURCE. INFORMATION FROM PRIMARY SOURCE IS PREFERED.
COMMUNICATION FAILURE
COMMUNICATION RESTORE
You should know that:

The best of automation function is protocol independent. It is a per-point redundancy, allowing any failure in the acquisition path. Connection with two links to the same device can also be done. However, this achieves almost the same as the Master link redundancy but with more configuration effort. When both IEDs have the same data map a redundant master can be used instead of a best of configuration.
The main advantaged of the best of function compared to a master link redundancy is that the best of allows the mixing of different devices. On the other hand, the disadvantage is the amount of configuration (3 points are needed to get the data: 2 master points and 1 best of point).
Priority
It is possible to give one of the SMPs the priority; this will make the SMP with the higher priority active when there are no error conditions. This setting will cause an additional failover when the SMP with the highest priority recovers from a fault. In case the prioritized SMP has an error condition, it will remain in standby mode. This is explained in the following sections.
153
Grouping 2 SMPs for redundancy

Introduction
The base SMP redundancy consists of an active SMP and a standby SMP. The active SMP is polling the devices and communicates with the control center as if it was a stand-alone system. The active and standby SMP are communicating with each other so that when the active SMP fails the standby becomes active. Both SMPs share a public IP address to which the control center can connect. This ensures that no special network configuration is needed at the control center; in fact when the control centre connects to the public IP-address it has no indication which SMP is active and which one is on standby.
10.2.15.3 10.2.15.1 10.2.15.2 10.2.15.1 10.2.15.3 10.2.15.2 10.2.15.1 10.2.15.3 10.2.15.2
ACTIVE
STANDBY
SMP FAILURE
ACTIVE
SMP RESTORED
STANDBY
ACTIVE
You should know that:

Each SMP has its own private IP address. Both SMPs share a public IP address which is assigned to the active SMP. Basic switchover condition is when the active SMP has a hardware failure. Serial devices are connected to both SMPs through Y-cables. The standby SMP can still be accessed by its private IP address for maintenance. It is possible to force a switchover. Both SMPs must have the same configuration.
Setting up two SMPs with SMP Manager

You will use SMP Manager to create an SMP redundancy group. The sections that follow provide a brief overview of the configuration process. To create a redundancy group:
In the SMP Manager window, choose the 2 SMP gateways you want to group together. Note that they must be the same model and have the same configuration file currently loaded. The SMP 4 does not support redundancy. Select one SMP and use the mouse and the Shift or Ctrl key on your keyboard, as for any standard Windows selection, to select the second SMP.
154
In the Gateway menu, click Group to display the Redundancy Parameters dialog box.
The Redundancy Parameters dialog box allows you to specify redundancy settings such as the virtual IP address, the LAN and serial connections to be used, and the conditions that have to exist for the SMPs to switch roles. Redundancy is defined by 3 categories of settings, corresponding to the tabs in the dialog box:
In the General settings tab, you identify the basic properties of the group:
The keep-alive settings, i.e., the frequency at which keep-alive messages are to be sent by the active SMP (every x milliseconds, where x is between 200 and 10,000), and the timeout interval after which the standby SMP presumes that the active SMP has failed and takes over as the active SMP (between 600 and 30,000 ms). The virtual address and subnet mask used to communicate with the group. The virtual IP address is different from the physical IP addresses you set up during the initial configuration of your SMPs. It identifies the group and is used by the control center to communicate with the active SMP. If the active SMP fails, the virtual IP address and subnet mask are assigned to the standby SMP. Optionally, the virtual address and subnet mask of the secondary network, if you are using a secondary network for the communication between the SMPs and the control center. Optionally, you can give priority to one of the SMPs for becoming the active SMP. If neither SMP is in a failure state, the one with top priority will become active.
155
The Links tab is used to specify the 2 connections that will be used to link the redundant SMPs to each other. These can be any combination of LAN or serial connections. The SMP 4-20 supports 1 LAN connection, while the SMP 8-40 and the SMP 16 can support 2. The active SMP uses these links to send regular heartbeat messages to the standby SMP. If the standby fails to receive the messages, it automatically assumes that it should become active. 2 distinct communications links are used, in order to minimize the chances of both SMPs becoming active due to a single faulty connection. In the Links tab, you identify: The type of first connection: LAN or serial. The type of the second connection: LAN or serial.
The communication mode, either RS-232 or RS-422, if you are using one or more serial connections between the 2 SMPs. With all 3 SMP models, you use a standard null modem cable for RS-232. For RS-422, you use a standard null modem cable with the SMP 16. However, you need a special cable for the SMP 4-20 or SMP 8-40; see the SMP 4-20 SMP 8-40 Installation Guide, GUI-316-027 T, for details.
A failover will automatically happen if the active SMP faces a major problem, such as a power failure, that prevents it from sending heartbeat messages. The Failover tab defines optional conditions that will trigger a failover such as:

The system available memory falls below a defined threshold. Low-voltage alarm detected on the unit power supply. For 16/CP-PM and 16/SG-PM, SMP 8-40, 4-20, a high-temperature alarm. The units network connections failed.
SMP Manager sends the settings to the 2 SMPs.
You will need to restart both SMPs in order to activate redundancy.
In the Restart Gateway dialog box, choose Shutdown and Restart to have the SMPs restart in normal mode.
The screenshot next shows an example:
156
The Redundancy column

The Redundancy column shows the current state of each SMP within the redundancy group. In the example, the second SMP is on hot standby. This happens if the data points of the devices connected to the SMPs have been configured for hot standby (see the Master Protocol Common Concepts document for details). There can be several intermediate states, such as initial, listen or speak, while the grouping takes place. Thereafter, the following states may be displayed:
Active: This is the active SMP. It communicates with the field devices and sends keep alive messages at a frequency set through parameter settings. In the event of a failover, it becomes the standby SMP. Standby: This is the standby SMP. It listens for keep alive messages from the active SMP and takes over as the active SMP if the latter fails to send a message within the expected number of milliseconds. Hot Standby: This is the standby SMP. It listens for keep alive messages from the active SMP. It also synchronizes all the data points that have been set up for hot standby in SMP Config. That is, whenever a transition occurs on a hot-standby data point, it updates the data point information. It takes over as the active SMP if the latter fails to send a message within the expected number of milliseconds. Failover time is shorter than with regular standby because integrity scans are not always required, since the hot-standby data points are already synchronized. Blank SMP Manager is not able to communicate with the SMP for one of the following reasons:
The SMP redundancy software is not running because you have not set the redundancy parameters. The SMP redundancy software is not installed. The SMP is down.
This column may also advise you of exceptional situations, as described here:
Peer IP: nnn.nnn.nnn.nnn: This is displayed for one of the SMPs in a redundancy group if the second SMP is not visible in the list. To fix the problem, add the second SMP to the list. Too Many SMPs: There are more than 2 SMPs in this redundancy group. To fix the problem, remove the excess SMPs. Different parameters: The 2 SMP gateways in this group do not have the same redundancy settings. To fix the problem, take the following steps:

Click one or both SMPs. In the Gateway menu, click Group Properties.
157
A warning message pops up, telling you that SMP Manager will use the default redundancy settings and asking you if you want to go on. If you reply in the affirmative, the Redundancy Parameters dialog box pops up and you can change the settings to your liking. When you close the dialog box, both SMPs will have the same settings. Restart both SMPs to activate the parameters: Click the SMP gateway to be restarted. In the Gateway menu, click Restart.
In the Restart Gateway dialog box, click Shutdown and Restart.
Warning: Do NOT reset the SMPs by pressing the reset button on the SMP itself, or you will lose your parameter settings!
Peer IP: nnn.nnn.nnn.nnn => Not in redundancy: The Peer IP is in the SMP gateway list, but is not part of the redundancy group. This could happen if one of the 2 SMPs in the redundancy group lost its redundancy configuration. To fix the problem, ungroup the SMP that is in the redundancy group and regroup the 2 SMPs. Virtual gateway (IP: nnn.nnn.nnn.nnn): You have added to the SMP gateway list, an SMP with the virtual IP address you assigned to the 2 SMPs in the redundancy group. The address of the active gateway is indicated in parentheses.
The redundancy configuration of all SMP gateways in the list is retrieved cyclically. This mechanism allows you to see the current redundancy state of all SMP gateways, on the SMP Manager main screen. Since the refresh cycle is relatively slow, the redundancy configuration of a given SMP gateway is automatically retrieved when the SMP gateway is added to the list, when it is restarted, and when one or more files are sent to it. You can refresh the redundancy state of all SMP gateways as follows:
In the View menu, click Refresh.
Hot standby
The SMP software has the possibility to maintain a complete up-to-date data image on the standby SMP. This feature, available on the most common master protocols, will duplicate all transitions received by the master protocol to the standby SMP. To take full advantage of the hot standby it is necessary to have the slave component also active:

In SMP Config, select the General nod of the slave component. In the Hot-Standby Support column, Disabled should appear. From the drop box, select Acquisition or Acquisition and Control:
Acquisition: the slave will report the data to its master without accepting control commands.
158
Acquisition and control: the slave will report data to its master and it will accept control commands. The commands will be forwarded to the active SMP which will forward the control command to the device.
3 10.2.15.3 10.2.15.1 2 10.2.15.2 3
ACTIVE 1
STANDBY
1. 2. 3.
The active SMP receives the data from the device. The standby SMP is updated. The data is sent to the control center by whichever SMP.
The public IP address is always associated with the active SMP. So when the control center wants to connect to the standby SMP, it needs to use the physical IP address.
Managing redundancy
Forcing an active SMP to become a standby SMP
To force an active SMP to become a standby SMP, proceed as follows:

Click the active SMP in the list of SMP gateways. In the Gateway menu, click Force Standby.
The SMP on which you clicked will go into standby mode, while the other SMP in the group will go into active mode.
Additional failover conditions

It is now possible to define additional failover conditions to have a better control of which SMP is active. The failover conditions are defined in the SysServerConfig.txt file and that file is be loaded to the SMP as any other file. In this file an additional 16 error conditions can be defined which will force a failover. An example file can be found in at \Program Files\Cybectec\SMP Tools\Documentation\Application notes.
159
Modifying the redundancy settings of an existing group

To modify the redundancy settings of an existing group of SMP gateways, proceed as follows:

In the SMP gateway list, click one or both SMPs. In the Gateway menu, click Group Properties. Use the Redundancy Parameters dialog box to modify the desired settings.
Ungrouping 2 SMP gateways

To ungroup 2 SMPs that had been grouped together for redundancy, proceed as follows:

In the SMP gateway list, click both SMPs. In the Gateway menu, click Ungroup.
Testing and validating the configuration

SMP Manager displays the current state of both SMPs in a redundancy group. You can also use SMP Log and SMP Trace to display additional information:
Using SMP Log, open the Redundancy folder of each SMP to check that one SMP is active and the other one is in standby mode, waiting for a failover. Using SMP Stats, open the System folder, then the Redundancy folder, to view additional information on the redundancy function.
Checking the redundancy status through the front panel

The GRP LED on the front panel of the SMP 16 indicates the redundancy status, as does the ST2 LED on the front panel of the SMP 4-20 and SMP 8-40. See your SMP installation guide for details.
160
Testing a redundant network

So far, we have discussed SMP redundancy. However, with the SMP 16 and the SMP 8-40, you can also set up network redundancy. The SMP and the control center can communicate via either network.
10.3.30.3 10.2.15.3 10.2.15.1 10.3.30.1 10.2.15.2 10.3.30.2 10.2.15.1 10.3.30.1 10.3.30.3 10.2.15.3 10.2.15.2 10.3.30.2
ACTIVE
STANDBY
NETWORK FAILURE
ACTIVE
STANDBY
10.3.30.3 10.2.15.3 10.2.15.1 10.3.30.1 10.2.15.2 10.3.30.2
SMP FAILURE
ACTIVE
Normally, the control center accesses the primary network and switches to the secondary network only if the primary network fails. You should therefore make sure the secondary network is working properly. To do this, you need to switch to the secondary IP address of your SMP, and then run SMP Log and SMP Trace. To switch from the first IP address to the second IP address:
In the SMP Manager Select menu, click Use Second Address.
Note that the switch to the second IP address applies not only to the SMP that has the secondary network, but to all the SMPs in your gateway list. From this point on, if you launch the SMP Tools, Telnet or Internet Explorer for any SMP gateway, these applications will use the second IP address. To switch back to the first IP address:
In the Select menu, click Use First Address.
Note that once a tool has been launched, it never switches IP addresses regardless of how many times you toggle the address selection. Address switching applies only to commands that take place after you instruct SMP Manager to switch addresses. Note further, that if there are other models in your SMP gateway list that support only one IP address, such as the SMP 4 or the SMP 4-20, toggling back and forth between the first and second IP address will have no effect. You will see the same logs, traces and statistics, regardless of which address you specify.
161
Setting up the SNMP server
Introduction
The SNMP server is an optional software module that allows the SMP to export statistics using the SNMP standard (Simple Network Management Protocol). The SNMP agent publishes and supports both standard MIBS that are supported by the Windows CE operating system and custom MIBS that are supported by the SMP gateway application. The agent supports extensive reading capabilities as well as limited writing and trap capabilities.
SNMP traps
SNMP traps are messages that are automatically sent to selected SNMP clients when specific, unusual events occur. They are the equivalent of alarms. Traps are automatically sent to listening SNMP clients whenever:

The SMP restarts. A communications link used by a master or slave protocol instance fails for more than 60 consecutive seconds. These traps are called link down traps. A communications link used by a master or slave protocol instance becomes active. These traps are called link up traps.
In order to send traps, the SMP gateway needs to know the IP addresses of the SNMP clients that are listening on the network. You can enter a maximum of 32 SNMP client IP addresses using the SMPs SNMP Manager.
163
Configuring the SNMP server

To configure the SNMP server:

In SMP Manager, click the SMP gateway and start a Telnet session. Enter the following command: snmpmgr
The SNMP manager lists all available commands, as shown next: \> snmpgr
SNMP Manager Available commands (case insensitive): A R L M C G D B I T O F H esc Q Add a client. Remove a client. Display all clients. Modify the community membership of a client. Change a client description. Add a community. Remove a community. Display all communities and their permissions. Modify the permissions of a community. Modify the name of the system contact. Modify the location of the Gateway on which the agent is running. List information about system contact and Gateway location. Display the list of all commands. Abort the current operation. Quit.
You can display the previous list any time, by using the H command. You should establish the SNMP settings in the following order:

Add communities and their permissions. Add a system contact. Add a system location. Add a number of clients and associate them to communities.
Any modifications you make will go into effect the next time the SMP is reset.
164
Time synchronization
The SMP gateway supports time synchronization using a demodulated and modulated IRIG-B signals, protocols, and SNTP. It can be synchronized by the GPS clock option, and IRIG-B signal or SNTP, or it can synchronize other devices with IRIG-B or SNTP. This section defines these time management systems, why it should be used, and how to use it with the SMP gateway.
Setting the clock in your SMP

The time in the SMP Gateway is set once during the installation. If the clock does not indicate the accurate time or was not set right, you can change it manually: Note: If the SMP is synchronized by DNP3, a GPS clock or any other external system, changing the time manually will not work.
From SMP Manager, in the menu Tools, click Telnet. At the command prompt, type clockmgr. Set the time, in the 24 hour notation. For example, if the displayed time is 7:03:32 P.M., type 19:03:32 PM.
Time is displayed in the 12-hour notation to accommodate the users, but when you set it you must use the 24-hour notation.
Concerning daylight saving time in 2007

A majority of substations use the universal time. Impact on the SMP gateway for the new DST schedule is therefore minimal. Please refer to the application note Changes to DST Schedule in 2007 on our web site http://www.cybectec.com for more information.
165
Why synchronize the SMP gateway?

The SMP internal clock is not synchronized to external elements. When the SMP gateway is synchronized, you do not have to worry about the internal clock drifting. All I/O changes, logs, traces, etc., are time-tagged with a greater degree of accuracy - typically one second or better. There are three way to synchronize the clock:
With a SCADA protocol, such as DNP3. Among the information this type of protocol provides, is a reliable time source for the gateway. Through an external source, such as IRIG-B. It could come from another GPS antenna connected to another device that redistribute demodulated or modulated IRIG-B. It could also come from a SMP 16 with the GPS clock option that distributes IRIG-B to your SMP. Directly from a GPS signal if you have an SMP 16 with the GPS clock option. You will then have the GPS antenna collecting a highly accurate satellite signal.
The SMP can redistribute time in several different ways:

Through a modulated or demodulated IRIG-B signal. With a protocol. With its integrated SNTP.
Following the August 2003 blackout, NERC has recommended that substation devices be synchronized using a GPS clock. When the SMP gateway is synchronized by an accurate time source such as an external IRIG-B source or its internal GPS clock, it can distribute accurate time to substation devices using IRIG-B or its internal SNTP time server: Output Delay Accuracy ( ms) Protocol output Protocol input SNTP input Modulated IRIG-B input Demodulated IRIG-B input GPS input
500 500 500 500 500
SNTP output
500 100 100 100 100
Modulated IRIG-B output

10 10 10
Demodulated IRIG-B output

10 1 1
Note that demodulated IRIG-B signals cannot be carried over long distances while the modulated IRIG-B can be carried in distances over 350 meters (1000 feet) without degrading. The SMP 16 gateways GPS clock installs directly on Cybectecs SMP 16/CP and SMP 16/SG gateways to provide a highly accurate internal time source. This factory-installed option provides a cost-effective solution to maintain substation devices in accurate synchronization.
166
The SMP gateway does not perform accurate time-tagging when I/O changes are received from a device, because the transmission delay is unpredictable. The device must time-tag the I/O changes itself for the time to be accurate. When the SMP gateway is synchronized, it can in turn synchronize other devices using different protocols such as DNP3, IEC-60870-5-101 or IEC-60870-5-104. The accuracy may be limited by the protocol, but the overall synchronization of all the devices is typically accurate to within one second. Here is a list of the possible synchronization types you can do with the different types of Cybectec gateways: SMP model
SMP 4-20 SMP 8-40 SMP 4 SMP 16/CP SMP 16/SG
Protocol

SNTP

Modulated IRIG-B
O O
Demodulated IRIG-B
O O
GPS
G G
Legend: O = With the SIOM option, G = with the SMP 16 GPS clock option.
IRIG-B and GPS accuracy

The Global Positioning System (GPS) is a satellite-based navigation system operated and maintained by the U.S. Department of Defense (DoD). GPS uses a constellation of satellites to calculate the exact position and altitude of the receiver station. GPS technology requires a very accurate time source in order to calculate the orbital position of the satellites and determine the position of the receiver. To ensure the required level of accuracy, each GPS satellite is equipped with 4 atomic clocks that are kept in synchronization with the U.S. Naval Observatory's Master Clock. Each satellite continuously transmits its current position and a time code. This is why we offer GPS time stamping as an accurate time source option. IRIG-B is a military standard of the Inter Range Instrumentation Group. The best known IRIG standard is the IRIG Timecode standard used to timestamp video, film, telemetry, radar, and other data collected at test ranges. The main difference between the codes that are classified in letters from A to H is their rate, which varies between 1 pulse per second and ten thousand pulses per second. The IRIG-B standard operates at 100 pulses per second. The SMP 16 GPS Clock uses the time information provided by the GPS system to provide a highly accurate time source for the substation. Setting up the GPS clock option is explained in detail in the SMP 16 GPS Clock Option installation guide, GUI-316-47 which is included on your documentation CD-ROM. Setting up IRIG-B is described in the installation guide of gateways supporting it.
167
What is SNTP?
NTP stands for Network Time Protocol, and is a standard Internet protocol used to synchronize the clocks of computers to a time reference. NTP was originally developed by Professor David L. Mills of the University of Delaware. As a full implementation of the NTP protocol seemed too complicated for many systems, a simplified version of the protocol, namely SNTP, was defined. SNTP (Simple Network Time Protocol) is basically NTP minus certain internal algorithms that are not required by all types of servers. SNTP uses UTC time. This means that typically, the time you see on your watch and the time that the SNTP uses do not match. Keep that in mind when you decide whether or not to synchronize your devices.
Setting up SNTP on the SMP gateway

The same application is used to configure both the SNTP client (to synchronize the SMP) and the SNTP server (to synchronize the devices). Proceed as follows:

In SMP Manager, click the SMP gateway to be configured, and start a Telnet session. Enter the following command: sntpmgr
The current client and server statuses are displayed, followed by the menu.
Enter the command to set up SNTP. S
To have the SMP gateway act as an SNTP server:
Respond Y to the first question.
To have the SMP act as an SNTP client and be synchronized with a remote SNTP server:

Respond Y to the second question. Specify the SNTP server IP address using the format xxx.xxx.xxx.xxx. Specify the refresh period. This is the frequency at which the SMP will connect to the server in order to be resynchronized. The default is 720 minutes (12 hours). Specify the recovery refresh period. This will be used if the SMP is not able to connect to the server; the SMP will try to connect at each recovery period, rather than at the normal refresh period. This value must be less than the normal refresh period. The default is 60 minutes (1 hour). Specify the maximum time variance. The SMP will ignore a time update if the difference between the SMP time and the new time provided by the server is greater than this setting. The default is 14,400 minutes (24 hours).
168
Right after the setup, there is a prompt that allows you to force the SMP gateway to synchronize itself immediately.
Monitoring the SNTP status

For the SMP 16, when the SNTP is synchronized, the SYNC LED will be green, otherwise it will be off. The status of synchronization can be seen in SMP Stats, in the Clock folder, from the Internals folder located in the System folder. For more information on SMP Stats, see Information provided by SMP Stats, on page 54. Also, clock information is explained in detail in the SMP 16 GPS clock option installation guide, GUI-316-47 which is included on your documentation CD-ROM.
169
Remote access to the SMP gateway through a serial port
You may want to use the SMP Tools on an SMP gateway that is not connected to your PC via a network. You would typically do this by setting up a dial-up connection and using a modem to call the SMP gateway from your PC. Less typically, you might choose to access the SMP by setting up a direct serial connection between a serial port on your PC and a serial port or the console port on the SMP gateway. This section explains how to set up dial-up and direct serial connections between a personal computer and an SMP gateway. The procedure differs slightly, depending on whether your PC is using the Windows XP or Windows 2000 operating system.
Windows XP setup procedures

If your PC operates under Windows XP, use the procedures outlined in this section to:

Setup a dial-up (modem) connection between the PC and the SMP gateway; Setup a direct serial connection between the PC and the SMP gateway.
Setting up a dial-up (modem) connection

The table further next outlines the procedure for setting up a dial-up (modem) connection between a PC running Windows XP, and an SMP gateway. If Cybectec security features are activated, you must make sure your computer is authorized to access the SMP (See Security, page 72) and that you selected Remote Access for the Guests group in the Security Editor, from SMP Managers File menu.
171
You must perform the steps in the order presented in the table. Step
1
To do this
Set up the SMP gateway to accept a dial-up connection
Follow these steps:

Perform this step for each SMP gateway with which you want to communicate via modem. 1. Start SMP Manager: Click the SMP gateway to be configured and in the Gateway menu, select Properties. In the Gateway Properties dialog box, select the check box This gateway is connected over a remote dialup. This will prevent polling on the dialup connection. From the Tools menu, click Telnet. Type RASMGR to start the RAS Manager connection application. Enter L, to display the device list. The device list is actually the list of ports on the SMP, including the console port. Enter M, to modify the SMP COM port you will use for the dial-up connection. Enter the number of the MODEM device to be modified. Note that you cannot specify the number of the console port, as the latter does not support modem connections. All the default settings should be OK, except for the last one: Use Device for Incoming Connections. Enter Y to allow incoming connections on the port and exit RASMGR. From the Windows Start menu, access the Control Panel. Double-click Phone and Modem Options. In the Phone and Modem Options dialog box, click the Modems tab.
2. 3. 4. 5. 6.
7. 8. 2 Install the modem, if necessary 1. 2. 3.
If the modem you plan to use appears in the list, skip the rest of this step and proceed to the next item in the table, since your modem is already installed. 4. 5. Click Add. In the Add Hardware Wizard dialog box, allow Windows to detect your modem automatically, and click Next.
172
Step
To do this
Follow these steps:

6. 7. Insert an installation CD for the modem driver, if you have one. In the Found New Hardware Wizard dialog box, choose whether you want Windows to install the driver automatically or from a specific location and click Next. Once Windows advises you that it has installed the driver, click Finish. Click Finish to close the Add Hardware Wizard dialog box.
8. 9.
10. Click OK to close the Phone and Modem Options dialog box. 3 Set up a new dial-up (modem) connection for the SMP gateway Perform this step for each SMP gateway with which you want to communicate via modem. 1. 2. 3. 4. 5. 6. 7. 8. 9. From the Windows Start menu, access the Control Panel. Double-click Network Connections. Double-click New Connection Wizard. In the New Connection Wizard dialog box, click Next. Click Connect to the network at my workplace and click Next. Click Dial-up connection and click Next. Enter a descriptive name for the connection and click Next. Enter the phone number you will use to dial the SMP gateway and click Next. Under Create this connection for, click Anyones use, click Next and click Finish.
10. In the Connect <Connection Name> dialog box, click Properties. 11. Click the Networking tab, then click Settings. 12. In the PPP Settings dialog box, clear the Enable LCP extensions checkbox, the Enable software compression checkbox, and the Negotiate multi-link for single link connections checkbox. Click OK. 13. Under This connection uses the following items, clear the Client for Microsoft Networks checkbox. 14. Click Internet Protocol (TCP/IP), and click Properties. 15. In the Internet Protocol (TCP/IP) Properties dialog box, click Advanced. 16. In the Advanced TCP/IP Settings dialog box, clear the Use default gateway on remote network checkbox and the Use IP header compression checkbox and click OK, three times 17. Close the Connect <Connection Name> dialog box. 4 Configure SMP Manager to communicate with the SMP gateway 1. 2. In the Gateway Properties dialog box, enter a significant name for the new SMP gateway, such as SMP via modem. If you have an SMP 4-20 or an SMP 8-40: Enter 100.100.100.1 in the First IP Address box. Enter 100.100.100.2 in the Second IP Address box. If you have an SMP 4 or an SMP 16: In the First IP Address box, enter the IP pool starting address that
173
Step
To do this
Follow these steps:

you specified when you installed your SMP (see your SMP installation guide). Do not enter anything in the Second IP Address box. Click Add. Note that even if you set up a number of SMP gateways to communicate via a dial-up connection, the PC will be able to communicate with only one SMP at a time, and will use the address(es) specified here.
Setting up a direct serial connection

The following table outlines the procedure for setting up a direct serial connection between a PC running Windows XP, and an SMP gateway. You must perform the steps in the order presented in the table. Step
1
To do this
Set up the SMP gateway to accept a direct connection
Follow these steps:

By default, an incoming direct connection is supported on the SMP console port. Skip to step 2 or if you want to use a direct connection on any other port, you have to set it up as follows: 1. 2. 3. 4. 5. 6. 7. 8. In SMP Manager, click the SMP gateway to be configured and start a Telnet session. Start the RASMGR application. Enter L, to display the device list. The device list is actually the list of ports on the SMP, including the console port. Enter M, to modify the SMP COM port you will use for the direct connection. Enter the number of the DIRECT device to be modified. All the default settings should be OK, except for the last one: Use Device for Incoming Connections. Enter Y to allow incoming connections on the port. Exit RASMGR. From the Windows Start menu, access the Control Panel. Double-click Phone and Modem Options. In the Phone and Modem Options dialog box, click the Modems tab. Click Add. In the Add Hardware Wizard dialog box, put a checkmark in the Dont detect my modem; I will select it from a list checkbox. Click Next. Under Manufacturer, click Standard Modem Types. Under Models, click Communications cable between two computers. Click Next. Click Selected ports. Click the communications port (COM1 or COM2) you want to use for the communications cable. Click Next, click Finish. Click OK to close the Phone and Modem
Add a communication cable between the PC and the SMP gateway
1. 2. 3. 4.
5. 6. 7. 8. 9.
174
Step
3
To do this
Set up a new direct serial connection to the SMP gateway
Follow these steps:

Options dialog box. 1. 2. 3. 4. 5. 6. 7. 8. 9. From the Windows Start menu, access the Control Panel. Double-click Network Connections. Double-click New Connection Wizard. In the New Connection Wizard dialog box, click Next. Click Set up an advanced connection. Click Next. Click Connect directly to another computer. Click Next. Click Guest. Click Next. Enter a descriptive name for the connection. Click Next. In the Select a device drop-down list, click Communications cable between two computers. Click Next.
10. Under Create this connection for, click Anyones use. Click Next. Click Finish. 11. In the Connect <Connection Name> dialog box, click Properties. 12. From the General tab, click Configure. 13. In the Maximum speed drop-down list, select 115200 bps. 14. Clear the Enable hardware flow control checkbox. Click OK. 15. Click the Networking tab, then click Settings. 16. In the PPP Settings dialog box, clear the Enable LCP extensions checkbox, the Enable software compression checkbox, and the Negotiate multi-link for single link connections checkbox. Click OK. 17. Under This connection uses the following items, clear the Client for Microsoft Networks checkbox. 18. Click Internet Protocol (TCP/IP), and click Properties. 19. In the Internet Protocol (TCP/IP) Properties dialog box, click Advanced. 20. In the Advanced TCP/IP Settings dialog box, clear the Use default gateway on remote network checkbox and the Use IP header compression checkbox. Click OK three times. 21. Close the Connect <Connection Name> dialog box. 4 Configure SMP Manager to communicate with the SMP gateway 1. 2. 3. In the SMP Manager Gateway menu, click Add. In the Gateway Properties dialog box, enter a significant name for the new SMP gateway, such as SMP direct connection. If you have an SMP 4-20 or an SMP 8-40: Enter 100.100.100.1 in the First IP Address box. Enter 100.100.100.2 in the Second IP Address box. If you have an SMP 4 or an SMP 16: In the First IP Address box, enter the IP pool starting address that you specified when you installed your SMP (see your SMP installation guide). Do not enter anything in the Second IP Address box.
175
Step
To do this
Follow these steps:

4. Click Add.
The PC will communicate with the SMP using the address(es) specified here.
Windows 2000 setup procedures

If your PC operates under Windows 2000, use the procedures outlined in this section to:

Setup a dial-up (modem) connection between the PC and the SMP gateway. Setup a direct serial connection between the PC and the SMP gateway.
Setting up a dial-up (modem) connection

The following table outlines the procedure for setting up a dial-up (modem) connection between a PC running Windows 2000, and an SMP gateway. You must perform the steps in the order presented in the table. Step
1
To do this
Set up the SMP gateway to accept a dial-up connection
Follow these steps:

Perform this step for each SMP gateway with which you want to communicate via modem. 1. 2. 3. 4. 5. In SMP Manager, click the SMP gateway to be configured and start a Telnet session. Start the RASMGR application. Enter L, to display the device list. The device list is actually the list of ports on the SMP, including the console port. Enter M, to modify the SMP COM port you will use for the dial-up connection. Enter the number of the MODEM device to be modified. Note that you cannot specify the number of the console port, as the latter does not support modem connections. All the default settings should be OK, except for the last one: Use Device for Incoming Connections. Enter Y to allow incoming connections on the port. Exit RASMGR. From the Windows Start menu, click Settings, and then click Control Panel. Double-click Phone and Modem Options. In the Phone and Modem Options dialog box, click the Modems tab.
6. 7. 8. 2 Install the modem, if necessary 1. 2. 3.
If the modem you plan to use appears in the list, skip the rest of this step and proceed to the next item in the table, since your modem is already
176
Step
To do this
Follow these steps:

installed. Click Add. 4. 5. 6. 7. In the Add/Remove Hardware Wizard dialog box, allow Windows to detect your modem automatically, and click Next. In the Found New Hardware Wizard dialog box, click Next. Choose whether you want Windows to search for a suitable driver or whether you want to choose the driver from a list. Click Next. If you have an installation CD, insert it in the drive, click CD-ROM drives and clear the other checkboxes; otherwise, click Microsoft Windows Update and clear the other checkboxes. Click Next. Once Windows advises you that it has found the driver, click Next. Once Windows has finished installing the driver, click Finish.
8. 9.
10. Click Finish to close the Add/Remove Hardware Wizard dialog box. 11. Click OK to close the Phone and Modem Options dialog box. 3 Set up a new dial-up (modem) connection for the SMP gateway Perform this step for each SMP gateway with which you want to communicate via modem. 1. 2. 3. 4. 5. 6. 7. 8. 9. From the Windows Start menu, click Settings, and then click Control Panel. Double-click Network and Dial-up Connections. Double-click Make New Connection. In the Network Connection Wizard dialog box, click Next. Click Dial-up to private network. Click Next. Enter the phone number you will use to dial the SMP gateway. Click Next. Under Create this connection, click For all users. Click Next. Enter a descriptive name for the connection. Click Finish. In the Connect <Connection Name> dialog box, click Properties.
10. Click the Networking tab, then click Settings. 11. In the PPP Settings dialog box, clear the Enable LCP extensions checkbox, the Enable software compression checkbox, and Negotiate multi-link for single link connections checkbox. Click OK. 12. Under Components checked are used by this connection, clear the Client for Microsoft Networks checkbox and the File and Printer Sharing for Microsoft Networks checkbox. 13. Click Internet Protocol (TCP/IP), and click Properties. 14. In the Internet Protocol (TCP/IP) Properties dialog box, click Advanced. 15. In the Advanced TCP/IP Settings dialog box, clear the Use default gateway on remote network checkbox and the Use IP header compression checkbox. Click OK three times. 16. Close the Connect <Connection Name> dialog box. 4 Configure SMP Manager 1. 2. In the SMP Manager Gateway menu, click Add. In the Gateway Properties dialog box, enter a significant name for
177
Step
To do this
to communicate with the SMP gateway
Follow these steps:

the new SMP gateway, such as SMP via modem. 3. If you have an SMP 4-20 or an SMP 8-40: Enter 100.100.100.1 in the First IP Address box. Enter 100.100.100.2 in the Second IP Address box. If you have an SMP 4 or an SMP 16: In the First IP Address box, enter the IP pool starting address that you specified when you installed your SMP (see your SMP installation guide). Do not enter anything in the Second IP Address box. Click Add. Note that even if you set up a number of SMP gateways to communicate via a dial-up connection, the PC will be able to communicate with only one SMP at a time, and will use the address(es) specified here.
Setting up a direct serial connection

The following table outlines the procedure for setting up a direct serial connection between a PC running Windows 2000, and an SMP gateway. You must perform the steps in the order presented in the table. Step
1
To do this
Set up the SMP gateway to accept a direct connection
Follow these steps:

By default, an incoming direct connection is supported on the SMP console port. If you want to use a direct connection on any other port, you have to set it up as follows: 1. 2. 3. 4. 5. 6. 7. 8. In SMP Manager, click the SMP gateway to be configured and start a Telnet session. Start the RASMGR application. Enter L, to display the device list. The device list is actually the list of ports on the SMP, including the console port. Enter M, to modify the SMP COM port you will use for the direct connection. Enter the number of the DIRECT device to be modified. All the default settings should be OK, except for the last one: Use Device for Incoming Connections. Enter Y to allow incoming connections on the port. Exit RASMGR. From the Windows Start menu, click Settings, and then click Control Panel. Double-click Phone and Modem Options. In the Phone and Modem Options dialog box, click the Modems tab. Click Add. In the Add/Remove Hardware Wizard dialog box, put a checkmark in the Dont detect my modem; I will select it from a list checkbox. Click Next.
Add a communication cable between the PC and the SMP gateway
1. 2. 3. 4.
178
Step
To do this
Follow these steps:

5. 6. 7. 8. 9. Under Manufacturers, click Standard Modem Types. Under Models, click Communications cable between two computers. Click Next. Click Selected ports. Click the communications port (COM1 or COM2) you want to use for the communications cable. Click Next. Click Finish. Click OK to close the Phone and Modem Options dialog box. From the Windows Start menu, click Settings, and then click Control Panel. Double-click Network and Dial-up Connections. Double-click Make New Connection. In the Network Connection Wizard dialog box, click Next. Click Connect directly to another computer. Click Next. Click Guest. Click Next. In the Select a device drop-down list, click Communications cable between two computers. Click Next. Under Create this connection, click For all users. Click Next. Enter a descriptive name for the connection. Click Finish.
Set up a new direct serial connection to the SMP gateway
1. 2. 3. 4. 5. 6. 7. 8. 9.
10. In the Connect <Connection Name> dialog box, click Properties. 11. From the General tab, click Configure. 12. In the Maximum speed drop-down list, select 115200 bps. 13. Clear the Enable hardware flow control checkbox. Click OK. 14. Click the Options tab, and put a checkmark in the Redial if line is dropped checkbox. 15. In the Time between redial attempts drop-down list, select 30 seconds. 16. Click the Networking tab, then click Settings. 17. In the PPP Settings dialog box, clear the Enable LCP extensions checkbox, the Enable software compression checkbox, and the Negotiate multi-link for single link connections checkbox. Click OK. 18. Under Components checked are used by this connection, clear the Client for Microsoft Networks checkbox and the File and Printer Sharing for Microsoft Networks checkbox. 19. Click Internet Protocol (TCP/IP), and click Properties. 20. In the Internet Protocol (TCP/IP) Properties dialog box, click Advanced. 21. In the Advanced TCP/IP Settings dialog box, clear the Use default gateway on remote network checkbox and the Use IP header compression checkbox. Click OK three times. 22. Close the Connect <Connection Name> dialog box. 4 Configure SMP Manager 1. 2. In the SMP Manager Gateway menu, click Add. In the Gateway Properties dialog box, enter a significant name for
179
Step
To do this
to communicate with the SMP gateway
Follow these steps:

the new SMP gateway, such as SMP direct connection. 3. If you have an SMP 4-20 or an SMP 8-40: Enter 100.100.100.1 in the First IP Address box. Enter 100.100.100.2 in the Second IP Address box. If you have an SMP 4 or an SMP 16: In the First IP Address box, enter the IP pool starting address that you specified when you installed your SMP (see your SMP installation guide). Do not enter anything in the Second IP Address box. Click Add. The PC will communicate with the SMP using the address(es) specified here.
180
Using a Dial-Up Connection for DNP3 or IEC 60870-5-101
The SMP Gateway could need a dialup connection for DNP3 or IEC 60870-5-101 protocols in a situation where there is no network between the SMP and the control center and you cannot establish a network connection to the SMP using the procedures described under Remote access to the SMP gateway, page 171. If the control center uses the DNP3 or IEC 60870-5-101 protocol, you can establish a serial connection, via a dial-up modem, between the SMP and the control center. The control center will call the SMP gateway. The same holds true if you need to communicate between the SMP and a device that uses DNP3 or IEC 60870-5-101and that supports a modem connection. The SMP gateway will call the device. Communication via modem is available as an option on all SMP models. On the SMP 4, you use an internal modem. However, you have to order the modem at the time you purchase the SMP, and the modem port replaces one of the serial ports. On the SMP 16/CP and SMP 16/SG, the modem is internal and has its own port. With the SMP 4-20 and SMP 8-40, you have to use an external modem, which you plug into a serial port. Note that will all SMP models, you can always plug an external modem into any serial port. Having the SMP communicate, via dial-up modem with a PC or a device using DNP3 or IEC 60870-5-101, requires that you perform the following configuration steps with SMP Config:

Define which serial ports have a modem. Create a modem pool. Add modems to the pool. Create a modem pool master connection if the SMP gateway will call a device, or create a modem pool slave connection if the control center will call the SMP gateway.
181
Specifying which serial ports have modems

To indicate that a modem is connected to a specific serial port:

Start SMP Config from the SMP Manager window. In the left pane, click Serial Ports. In the right pane, in the Interface drop-down list of the corresponding serial port, click Modem Asynchronous.
Creating a modem pool

A modem pool manages a certain number of physical modems so that when an outgoing call is to be made, the pool selects an available modem to perform the call. Similarly, when an incoming call is received, the pool identifies the caller and dispatches the call to the appropriate connection (eventually to the protocol component). There must be at least one modem per pool. In the case of the SMP 8-40, all the modems in a pool must be connected to serial ports on the same board. When it receives an incoming call, a modem pool needs to identify the caller in order to dispatch the call to the appropriate protocol component. Since the identification is protocol-specific, each protocol has its own method for identifying the caller. The identification procedure returns the callers DEVICE ADDRESS. This DEVICE ADDRESS is then compared with the DEVICE ADDRESS of each modem pool slave connection connected to the pool. Note that a modem pool slave connection DEVICE ADDRESS is set by the protocol components. When a match is found, the communication path is set up from the modem pool slave connection to the modem. Identification is performed by the Call Dispatcher. The identification procedure for each protocol supported is specified in the table next. Protocol
IEC 60870-5-101
Identification Procedure
The Call Dispatcher sends an IEC 60870-5-101 RESET OF LINK broadcast frame. The slave device is expected to respond with an ACK frame containing its own DEVICE ADDRESS. The Call Dispatcher sends a DNP3 RESET OF LINK broadcast frame. The slave device is expected to respond with an ACK frame containing its own DEVICE ADDRESS as the source address.
DNP3
To add a modem pool:

In the left pane, click Serial Ports, then on Modem Pools. In the right pane, enter the name of the pool. Edit the modem pool settings.
These settings set up the behavior of the Call Dispatcher, as described in the table next.
182
Setting
Type
Description
The communications protocol supported by the modem pool. The default value automatic means that the supported protocol will be determined automatically. Allowed values: Automatic IEC 60870-5-101 DNP Default value: Automatic
Dispatcher Address Size
The size of the DEVICE ADDRESS, in bytes. This setting is taken into account when a frame is sent or received, since it affects the size of the frame. Range: Default value: 1 to 8 1
Dispatcher Response Timeout
This setting specifies how much time the dispatcher will wait for the reception of a response to a request. Range: Default value: 0 to 60,000 ms 10,000 ms
Dispatcher Interchar Delay
This setting specifies the maximum time allowed between 2 received bytes of a frame, for the frame to be considered valid. Range: Default value: 0 to 10,000 ms 250 ms
Dispatcher Recover Timeout
This setting specifies how much time the dispatcher will wait after a failure (invalid frame format, etc.), before retrying. Range: Default value: 0 to 10,000 ms 1,000 ms
Dispatcher Max Request Retry
This setting specifies how many times the dispatcher will try to identify the device. Range: Default value: 0 to 20 3
183
Adding a modem to a modem pool

To add a modem to a modem pool:

In the left pane, click Serial Ports, then on Modems. In the right pane, choose a modem pool in the drop-down list for each modem. This will add the modem to the modem pool. Edit the modem settings for each modem (see following table). In the left pane, click Asynchronous Serial Ports. In the right pane, edit the serial port settings for each modem.
The meaning of each modem setting is given below: Setting

AT Init String
Description
This AT string is sent to the serial port to initialize the modem. It should be a valid AT string to which the modem will respond with an OK. Default value: ATZ
AT Off-Hook String
This AT string is sent to the modem to answer the call when a RING message is received. The modem must, therefore, be configured to NOT auto-answer the calls (avoid S0=X, where X is other than 0). Default value: ATA
AT Dial String
This AT string is prefixed to the phone number and sent to the modem to make outgoing calls. Default value: ATDT
AT On-Hook String
This AT string is sent to the modem to hang up. After a call has been completed, the AT Init String is always sent to reinitialize the modem. Default value: ATH0
Incoming Only
Put a checkmark if you want the modem to receive incoming calls but not be able to make outgoing calls. If you do not put a checkmark, the modem will be able to make and receive calls. Allowed values: checkmark / no checkmark Default value: no checkmark
AT Response Timeout
Specifies how much time the modem pool will wait for an answer to an AT string command. There is an exception for the ATDT and ATA commands, since it can take some time to synchronize the carriers and complete the call. For these exceptions, the maximum time is set to 3 minutes. The timeout value depends on the modem and more specifically, on the
184
Setting
Description
response time required for the +++ and ATH commands. Range: Default value: 0 to 60,000 ms 5,000 ms
Adding a modem pool master connection

A modem pool master connection is used by a protocol component to make outgoing calls to a device. This connection makes the link between the protocol component and the modem pool. To add a modem pool master connection, proceed as follows:

In the left pane, click Connections, then on Modem Masters. In the right pane:

Enter the name of the connection. Specify, via the drop-down list, the modem pool with which the connection will be associated. The modems belonging to the specified modem pool will be used to make outgoing calls for this connection. Enter the phone number and a supplementary AT initialization string. The phone number is mandatory and can contain any characters recognized by the modem. See your modem documentation about the availability and meaning of each dialing option. This setting cannot contain the ATDT prefix, since the latter is already configured in the modem settings. The supplementary AT initialization string is an optional AT string that will be sent to the modem just before the calling ATDTxxx command. This setting can be used to fine-tune modem options for specific calls, which means that you can override options specified in the general modem initialization string.
Adding a modem pool slave connection

A modem pool slave connection is used by a protocol component to receive incoming calls from a control center. This connection makes the link between the protocol component and the modem pool. To add a modem pool slave connection:

In the left pane, click Connections, then on Modem Slaves. In the right pane:

Enter the name of the connection. Specify, via the drop-down list, the modem pool with which the connection will be associated. Calls received by this modem pool will be dispatched to this connection component if the DEVICE ADDRESS matches.
185
Updating the SMP software and tools
This chapter explains the software architecture of the gateway, describes how to update the SMP Tools and how to update the SMP gateway software using the Tool called SMP Loader.
Software architecture of the SMP Gateway

To configure the SMP Gateway you use the SMP Tools, the software run on your computer with Windows XP or 2000. Inside the SMP gateway, there are also software components that need upgrading:
The SMP runs on Windows CE, called a firmware, the equivalent of Windows XP on your computer. The firmware file that run on the SMP gateway are the boot file, the Windows CE file and the gateway application. A new gateway version might include a new firmware version. The SMP gateway application (.app file), that contains your protocol translators and other gateway software files. The configuration file (.par file), that tells the gateway how to communicate with the computer.
Procedure update checklist

There is a software in the Tools specialized in carrying files from the computer to the gateway, called SMP Loader. This tool is mainly used for SMP 4-20 and SMP 8-40 models, and is described in the section SMP Loader, page 199). Consequently, whenever you receive a CD from Cybectec (or a FTP access to a download site), with a new version or release of the SMP software and tools, perform the upgrade by taking the following steps, in the order presented:
Upgrade the PC software, i.e., the SMP Tools (see Updating the SMP Tools on the PC, page 187). Use the table below for the next steps.
186
The table below shows the order in which you will update the SMP gateway components, and the SMP Tool that you will use to modify the component. Component to update
Windows CE Bootstrap programs Resident diagnostics SMP gateway application Configuration file
SMP 4 or SMP 16 Tool

SMP Manager SMP Manager SMP Manager SMP Manager SMP Config and SMP Manager
SMP 4-20 or SMP 8-40 Tool

SMP Loader SMP Loader SMP Loader SMP Manager SMP Config and SMP Manager
Updating the SMP Tools on the PC

Whenever you receive a new version from Cybectec, with a new version or release of the SMP software and tools, you will start by updating the SMP Tools on your PC. Much more rarely, you may need to update JRE (Java 2 Runtime Environment). Proceed as follows:

Insert the SMP Software and Tools CD-ROM in your computers CD drive. In the Welcome to the SMP Gateway window, click Upgrading. There may be specific instructions that apply to the version you were using previously. If so, follow these instructions before performing the upgrade. Click the item you want to upgrade and follow the instructions.
The SMP Tools installer will automatically remove the previous version before installing the new one.
Updating the SMP software on the SMP Gateway

Updating the SMP firmware
The functions of the SMP gateway are provided by a sophisticated embedded software system that includes a number of components:
The Windows CE operating system, which provides real-time system services, network services, and device drivers. The bootstrap program, in the very exceptional cases where it is a new version. That program loads the SMP gateway application and the Windows CE operating system into memory when the SMP starts up. 187
The resident diagnostics, which allow you to ensure that the SMP is working properly. The SMP gateway application, which implements all the functionalities of the SMP gateway.
These components constitute the SMPs firmware.
SMP 16 or SMP 4
To update the SMP firmware, compare the version you get from your SMP gateway's SMP Stats (for more information, refer to page 53) and to update any outdated file, execute the following steps in the order presented here:
If you used the console port for any reason, remove the cable that you connected between the SMP console port and the PC. Start SMP Manager.
Update Windows CE if necessary:

In the SMP Manager window, click your SMP gateway. In the Gateway menu, click Update SMP Gateway Firmware. The Select Firmware Library dialog box appears.
In the SMP 16 or SMP 4 folder, under SMP Tools\Manager\SMP Firmware Libraries, choose the Windows CE file. The file is called wince4.pkg. SMP Manager transfers the file to your SMP gateway and then informs you that you have to restart your SMP gateway for the new firmware to go into effect.
In the Restart Gateway dialog box, choose Shutdown and Restart to have the SMP restart in normal mode. All restarts are automatically logged in the SMPs internal log file. If you want to, you can enter a comment in order to indicate why you restarted the SMP. This comment will be added to the event log.
The SMP gateway will go through a series of startup steps, which will be displayed in the Status column in SMP Manager. Once the startup is complete, the Status column will display the current status of the SMP gateway:
If you are upgrading to version 4.0 of the SMP software and tools, the Status column will show that the SMP is now in Safe Mode. This means that Windows CE has detected unsigned executable files. This is normal at this stage and requires no corrective action. Go on to updating the SMP Gateway application. For any other upgrade, the Status column should show that the SMP has Started. If the Status column shows that your SMP did not start up normally, turn to Troubleshooting, page 205.
Update the bootstrap program if necessary:

In the SMP Manager window, click your SMP gateway. In the Gateway menu, click Update SMP Gateway Firmware.
188
The Select Firmware Library dialog box appears.
In the SMP 16 or SMP 4 folder, under SMP Tools\Manager\SMP Firmware Libraries, choose the bootstrap file. The file is called smpboot.pkg. You will need to restart in this case.
Update the SMP Gateway application:

In the SMP Manager window, click your SMP gateway. In the Gateway menu, click Update SMP Gateway Application. The Select Library dialog box appears.
In the SMP 16 or SMP 4 folder, under SMP Tools\Manager\SMP Firmware Libraries, choose the application file. The file is called SmpApp(version).app Simply close the Restart Gateway dialog box, if you are updating other components, you do not need to restart the SMP gateway now. The application file could be updated before or after the diags file.
Update the resident diagnostics if necessary:
Proceed as for the resident diagnostics, but in the firmware libraries, choose the diags file. The file is called diagsSMP16.pkg or diagsSMP4.pkg.
SMP Manager transfers the file to your SMP gateway and then informs you that you have to restart your SMP gateway for the new firmware to go into effect. The diags file could be updated before or after the application file.
You can then move on to the configuration file with SMP Config and SMP Manager.
SMP 4-20 or SMP 8-40

To update the SMP firmware, you will use SMP Loader. You will find detailed instructions on under SMP Loader, page 199. Execute the steps in the order presented here:

Update the primary and secondary bootstrap programs. Update the resident diagnostics. Update Windows CE. Remove the cable that you connected between the SMP console port and your PC when you used SMP Loader. Reset the SMP by holding down the reset button for at least 5 seconds, until the 4 front panel LEDs turn amber. Start SMP Manager.
The SMP gateway will go through a series of startup steps, which will be displayed in the Status column. Once the startup is complete, the Status column should show that the SMP has Started. If the Status column shows that your SMP did not start up normally, turn to Troubleshooting, SMP Gateway User Manual 189
page 205.
Updating the SMP gateway application

You will now update the SMP gateway application. Proceed as follows:

In the SMP Manager window, click your SMP gateway. In the Gateway menu, click Update SMP Gateway Application.
The Select Library dialog box appears.
Under Program Files\Cybectec\SMP Tools\Manager\SMP Software Libraries, select folder SMP 16, SMP 4, SMP 4-20 or SMP 8-40, depending on your SMP model. Choose the SMP gateway application version that you want to send to the SMP. The file has the extension .app and its name indicates the application version. For example, a file called SmpApp 1.14R2.app contains version 1.14, release 2, of the SMP gateway application.
SMP Manager sends the software to the specified SMP gateway and then informs you that you have to restart your SMP gateway for the new application to go into effect.
Simply close the Restart Gateway dialog box, without restarting the SMP gateway.
Updating the configuration file

The last step in upgrading to a new version or release of the SMP software and tools consists of updating the configuration file:

Start SMP Config and open your configuration file. The file name in the title bar should have a star (*) beside to inform you there is a change. From the File menu, select Save. A message box will inform you that the current configuration file will be upgraded to a current version. A backup is automatically saved with the word backup before the previous files name. Send the configuration file to the SMP using SMP Manager:

From the Gateway menu, select Send configuration file. SMP Manager will transfer the file on the SMP
190
Activating a new license
Whenever you contact Cybectec to request support for a new device that you want to connect to your SMP gateway, or to add support for a particular option for your SMP gateway, Cybectec will provide you with a new license. To activate your new license and take advantage of the new components, you need to go through the following steps:

Update your license information (see Updating your license information, below). Update the SMP gateway application (see Updating the SMP gateway application, page 193).
Updating your license information

Proceed as follows to update your license information:

In the SMP Manager window, click your SMP gateway. In the Gateway menu, click Update SMP Gateway License.
The Update license dialog box appears.
In this dialog box, enter your license ID and your key (both rows) exactly as they appear in the instructions (on the CD cover or in your email), and click OK.
191
If you are updating the license information for a group of SMP 4-20s or SMP 8-40s that have the same license ID, you can simplify the task as follows:
Enter the license ID and key (both rows) of the first SMP. The license ID you have just entered gets added to the License ID drop-down list, and SMP Manager keeps track of the associated key. For the remaining SMPs, simply choose the license ID in the dropdown list; the key information will be supplied automatically. Another way to simplify the task is to select several SMPs of the same type before performing the update. The license information will be applied to all the selected SMPs.
You can click the Details button, in order to view the functions provided by the new license before actually performing the update. If SMP Manager suggests that you restart the SMP gateway, restart it in normal mode by choosing Shutdown and Restart in the Restart Gateway dialog box. If there is a new protocol, you must reload the gateway application and restart.
The License Information dialog box displays the various software features supported by your license, such as redundancy, Soft PLC and automation functions. It also displays information about the number of master protocols (one per device) and slave protocols (one per control center) supported by your license. For all models except the SMP 4, the dialog box also shows which specific protocols are supported by your license. The dialog box is shown below, first for an SMP 4-20 and then, for an SMP 4:
192
Here is a brief explanation of the classes shown in the dialog box:
Class 1 includes commonly used protocols such as DNP3, Modicon MODBUS, SEL and IEC60870-5. Class 2 currently includes only UCA 2.0. Class 3 currently includes ICCP and 61850.
Updating the SMP gateway application

The second step in activating a new license consists of updating the SMP gateway application. Proceed as follows:

In the SMP Manager window, click your SMP gateway. In the Gateway menu, click Update SMP Gateway Application .
The Select Library dialog box appears.
Under Program Files\Cybectec\SMP Tools\Manager\SMP Software Libraries, select folder SMP 16, SMP 4, SMP 4-20 or SMP 8-40, depending on your SMP model. Choose the SMP gateway application version that you want to send to the SMP. The file has the extension .app and its name indicates the application version. For example, a file called SmpApp 1.14R2.app contains version 1.14, release 2, of the SMP gateway application.
SMP Manager sends the software to the specified SMP gateway and then informs you that you have to restart your SMP gateway for the new application to go into effect.
Simply close the Restart Gateway dialog box, and restart the SMP gateway.
193
Miscellaneous SMP Tool features
This section presents SMP Manager and SMP Config commands that provide useful capabilities, and that were not discussed in other sections of the document.
SMP Manager features

SMP Manager has a number of handy features:
Displaying only those SMPs with which SMP Manager is currently in communication. (Click Active Gateways in the View menu.) Choosing the time display format: local time or UTC. (Click Time Display Options in the Edit menu.) Exporting your SMP gateway list. (Click Export List in the File menu.) Importing an SMP gateway list. (Click Import list in the File menu.) Setting the behavior of SMP Manager.
Setting SMP Manager options

To set the options in the SMP Manager
In the Edit menu, click Options. The Options dialog box will appear:
194
The dialog box contains the following boxes and buttons: Object
Show splash screen on startup Show SMP Manager topmost
Description
If you put a checkmark in this box, the SMP Manager splash screen will appear when you start up the application. If you put a checkmark in this box, the SMP Manager main screen will always be displayed on top of all other screens on your PC. Displays the folder that will be used when SMP Manager sends files to an SMP gateway. The folder referred to here resides on the SMP. Use this option to specify the action to be taken during a file transfer to the SMP:
Upload directory
If remote file already exists
Overwrite The remote file will automatically be overwritten with the source file located on your PC. Skip The remote file will not be overwritten. Prompt You will be asked whether or not the remote file is to be overwritten.
195
Object
Show SMP Manager
Description
Use this option to specify how you want SMP Manager to be displayed at the bottom of your Windows screen.
On taskbar only. Shows the SMP Manager name and icon on your Windows taskbar but not in the system tray. In system tray only. Shows the SMP Manager name and icon in the system tray but not on your Windows taskbar. On taskbar and in system tray. Shows the SMP Manager name and icon on the Windows taskbar and in the system tray.
The system tray is located in the rightmost corner of the Windows taskbar.
SMP Config features

SMP Config has a few handy features:
Exporting your SMP configuration to a .csv file. (Click Export List in the File menu.) Importing an SMP configuration previously saved as a .csv file. (Click Import list in the File menu.) Clearing the message pane. (Click Clear Message Pane in the Validate menu.)
System data points

The SMP gateway has a set of system points for redundancy, status, remote access, security, and synchronization. They can be seen in the SMP Web server and they can provide useful information to trigger alarms. The following list describes all the available system data points: Data point Description
Local Control points _smp___localControl When this binary input indicates if the active SMP gateway is controlled locally by Visual Substation or another HMI, this point is a 1. If the gateway is controlled by remote, this point is 0. When the SMP restarts, it becomes 0. This binary output allows you to switch from local (Visual Substation) to remote (SCADA) control. Use _smp___localControl to see which state the SMP gateway is
_smp___setLocalControl
196
Data point
Description
in. Redundancy points
_smp___rsLocal_ok _smp___rsRemote_ok
This point will be 1 when the local gateway is operational. This point will be 1 when the redundant gateway is operational. This point will be 1 when the local gateway which is the gateway being used, is active. This point will be 1 when the redundant gateway is on standby. This point will be 1 when the redundant gateway is on hot standby, which means that both SMP gateways are fed the same information. This point will be 1 when the first of two connections between the SMP gateways is operational. This point will be 1 when the second of two connections between the SMP gateways is operational. This point will be 1 when the SMPs are synchronized with the same time source. This point is used in failover conditions. This point will be 1 when the LAN condition is operational. This point is used in failover conditions. This point will be 1 when the voltage supply operates within the set parameters. This point is used in failover conditions. This point will be 1 if applicable when the temperature is within the set parameters of normal temperatures. This point is used in failover conditions. This point will be 1 when the available memory is within the set parameters of normal use. This point is used in failover conditions. This point will be 1 when the group address defined for the redundant units is valid. This point is used in failover conditions. Common Power Status points
_smp___rsLocal_active
_smp___rsRemote_standby
_smp___rsRemote_hotStandby
_smp___rsFirstConnection_ok
_smp___rsSecondConnection_ok
_smp___rsSynchronized
_smp___rsLan_ok
_smp___rsVoltage_ok
_smp___rsTemp_ok
_smp___rsMem_ok
_smp___rsGroupAddress_ok
_smp___voltage_ok
This point will be 1 when the voltage supply operates within the set parameters. SMP 4-20, SMP 8-40 and SMP 4
_smp___battery_ok
This point will be 1 when the battery is operational.
197
Data point
Description
SMP 4-20 & SMP 8-40
_smp___temp_ok
This point will be 1 if when the temperature is within the set parameters of normal temperatures. Remote access points
_smp___dialupEnable
This binary output point is used to lock or unlock all incoming RAS dialup connections to the SMP gateway. This binary output point is used to lock or unlock all incoming RAS dialup connections to the SMP gateway. This binary input point indicates whether or not there is a communication in progress via an incoming RAS dialup connection. Passthru system points
_smp___dialupEnabled
_smp___dialupInUse
_smp___passthru<connection>En able _smp___passthru<connection>En abled _smp___passthru<connection>In Use
This binary output point is used to lock or unlock a particular passthru connection. The name of the connection, as defined in SMP Config, is included in the name of the data point. This binary input point indicates whether a particular passthru connection is currently enabled or disabled.
This binary input point indicates whether a particular passthru connection is currently active.
Security-related points _smp___securityAccountLocked This binary output point shows if the account is locked.
System Folder points destined to Enterprise Solutions _smp___Folder(foldername)_Ava ilable _smp___Folder(foldername)_Fre eDiskSpace _smp___Folder(foldername)_Lo wDiskSpace This binary output point will be 1 if the storage folder in the server, for this gateway, is available. This binary output point will be 1 if the storage folder in the server, for this gateway, has free space. This binary output point will be 1 if the storage folder in the server, for this gateway, has low disk space. Clock and time-related points _smp___clockSynchronized If the gateway is synchronized by a source such as IRIG-B, this binary output point will show the clock synchronization status. When the gateway's SYNC LED is green, whish means that the clock is synchronized, this point shows a 1.
198
Data point
_smp___clockYear _smp___clockMonth _smp___clockDay _smp___clockHour _smp___clockMinute _smp___clockSecond
Description
This analog output point states the clock's year. This analog output point states the clock's month of the year. This analog output point states the clock's day of the month. This analog output point states the clock's hour of the day. This analog output point states the clock's minute of the hour. This analog output point states the clock's second of the minute.
Temperature sensor on SMP 16/CP-PM and SMP 16/SG-PM _smp___temperature This analog output point states the temperature inside the gateway.
SMP Loader
SMP Loader should be used for the following purposes:
To update Windows CE, the resident diagnostics, the primary bootstrap, or the secondary bootstrap of an SMP 4-20 or an SMP 8-40. To update the secondary bootstrap program of an SMP 16 or an SMP 4. The primary bootstrap, which resides in the ROM, is factory-installed and cannot be updated in the field. You can, in fact, load Windows CE and the resident diagnostics with SMP Loader, but you should use SMP Manager unless there is a problem.
When the SMP is powered up or reset, the following components are started up, in the order listed:

Primary bootstrap program. Secondary bootstrap program. Windows CE.
In order to use SMP Loader, you need to interrupt the previous process before it gets to Windows CE. You accomplish this by putting the SMP into Command mode.
Using SMP Loader

Using SMP Loader requires that you go through 3 steps:

Connect your PC to the SMP. Start SMP Loader. 199
Connecting your PC to the SMP

Connect your PC to the SMP as follows:
Using a connection cable, connect one of the communication ports of your PC to the SMP console port:
Use a standard RS-232 direct cable equipped with a DB9 male connector at one end and a DB9 female connector at the other end. Note that if you are using a portable computer that does not have an external serial port, you will need to use a USB to RS-232 serial converter. Connect the cable between the SMPs console port and the PCs serial communications port (typically COM1 or COM2).
Starting SMP Loader

Once your PC is connected to the SMP, you will start SMP Loader as follows:

Click Start on the Windows taskbar. Point to Programs, then to Cybectec, and then to SMP Tools. In the SMP Tools menu, click SMP Loader.
The SMP Loader main screen appears.
In the Connection menu, click Communication Settings to display the Communication Settings dialog box. Most of the communication settings are unavailable, as they cannot be changed. However, set the 2 active setting as follows:
Port
The communications port you are using on your PC (COM1, COM2, ). 115200 bps. Note, however, that some computers may not support your specified speed. In that case, try a lower speed.
File Transfer Speed
Putting the SMP into Command mode

To put the SMP into Command mode, you simply need to reset the SMP. Proceed as follows, depending on the SMP model:
SMP 4-20 or SMP 8-40: Hold down the reset button until all the LEDs (power, watchdog timer, ST1 and ST2) simultaneously turn amber. SMP 4: Insert a pointed object in the reset aperture and apply pressure until the watchdog timer LED stops flashing. Do not use a lead pencil, as it could break and damage the SMP since lead is a conductor.
200
SMP 16: Turn off the power to the SMP 16, and then power it up again.
Within approximately 30 seconds, the SMP Loader window will show the files that are currently loaded on the SMP gateway.
Main screen
The SMP Loader main screen is shown next, first for an SMP 16/SG and then for an SMP 8-40.
As you can see, the SMP 16 display only shows Windows CE (in the example, version 4 is loaded on the SMP). This is also true for an SMP 4. The SMP 8-40 screen shows Windows CE and the resident diagnostics, and each file name is preceded by the board A or B on which the file is located. The Created and Received columns will show N/A if the date and time are not available due to certain hardware constraints. It is important to note that the display area does not list the bootstrap programs, even though these do indeed reside on the SMP. However, the secondary bootstrap version is shown on the status bar at the bottom of the screen. In very rare cases, the status bar could show a primary bootstrap for an SMP 4-20 or SMP 8-40 (see Corrupted secondary bootstrap, page 204). You can also view the bootstrap versions as follows:
In the Connection menu, click Bootstrap Versions.
A dialog box appears, showing the versions of both bootstrap programs. For the SMP 4 and SMP 16, the dialog box indicates that the primary bootstrap version is unavailable since it resides in the ROM and cannot be modified in the field.
201
Transferring files to the SMP gateway

You can transfer one or more files to the SMP gateway, and you can choose the files individually. To choose the files to be transfered, take one of the following steps:
Using Windows Explorer, drag and drop the files in your SMP Loader main screen display. OR
Click Send in the File menu. A Windows file opening dialog box appears. Point to SMP Tools\Manager\SMP Firmware Libraries, and then to the SMP 4, SMP 420, SMP 8-40 or SMP 16 folder, depending on the type of SMP you have. Choose SMP Loader Files in the Files of type drop-down list. This will display one or more files with the extension .VL. Click the file you want to send, and click Open.
The File Information dialog box appears, giving you a description of each file, within the .VL file, that you are about to transfer and asking you to confirm your intention to carry out the transfer.
202
The transfer takes place once you have responded to the question for all the files that were listed in the .VL file, and a dialog box shows you the progress of the operation. After the transfer, the transfered files appear in the list in the SMP Loader window, if they were not already in the list. Otherwise, you will simply notice a difference in the version number, the size and the creation date. In our example, we updated the diagnostics file from version 1.1R11 to version 1.1R12 (compare with Main screen, page 201).
Notes:

The SMP will not use the transfered files until the next reset. If you transfer a bootstrap program, it will not appear in the list even though the file has indeed been transfered. Furthermore, if you look at the bootstrap version numbers (by clicking Bootstrap Versions in the Connection menu), you will see that the secondary bootstrap number has not been updated. The version number will be updated on the next reset of the SMP gateway.
Log file
SMP Loader records every significant event until you exit the application, including startup, file transfers, file deletions, requests for bootstrap versions, communication port settings, transfer cancellations, refreshes, communication errors, and exit. The log file, which can be read with Notepad, is located in SMP Tools\Manager\SMP Firmware Libraries, under the name Loader.log. Each time you start the application, SMP Loader overwrites the information contained in the file.
Updating bootstraps under unusual circumstances

An unusual circumstance, such as a blackout during a bootstrap transfer, could cause a bootstrap program to become corrupted. For an SMP 4-20 or SMP 8-40, this could happen to the primary or the secondary bootstrap; for an SMP 4 or SMP 16, it could only happen to the secondary bootstrap.
203
Corrupted primary bootstrap

If the primary bootstrap of an SMP 4-20 or SMP 8-40 is corrupted, contact Cybectec Technical Support.
Corrupted secondary bootstrap

If the secondary bootstrap of your SMP is corrupted, use one of the following procedures. SMP 4 or SMP 16
Contact Cybectec Technical Support.
SMP 4-20 or SMP 8-40 Normally, SMP Loader communicates with the secondary bootstrap program of the SMP. However, if the secondary bootstrap is corrupted, SMP Loader has to communicate with the primary bootstrap in order to load a new secondary bootstrap. In that case, you have to put the primary bootstrap in Update mode. In this mode, you do not have access to the usual SMP Loader functions. All you can do is load the bootstrap programs. Also note that SMP Loader will automatically set its communication speed to 19200 bits per second. Proceed as follows:
Simultaneously hold down the reset, TEST1 and TEST2 buttons until all four LEDs (power, watchdog timer, ST1 and ST2) turn amber. Release ONLY the reset button and keep holding down the TEST1 and TEST2 buttons until the first 2 LEDs (power and watchdog timer) go from amber to red, and the other 2 (ST1 and ST2) go from amber to green. Note: At this point, the information displayed on the LCD is not valid and is, therefore, to be ignored.
Transfer the secondary bootstrap program to the SMP using SMP Loader (see Transferring files to the SMP gateway, 202).
204
Troubleshooting
Introduction
The SMP gateway is a highly reliable substation-grade device. Most operational problems result from configuration errors, and there are a few simple steps you can take to identify and solve these problems. This section discusses the following types of problems:

Startup problems. Communication problems. Problems with data validity. Problems executing control operations.
Getting additional help

There are a number information sources that can help you solve your problems. You can turn to our website - www.cybectec.com , to find answers to frequently asked questions (FAQ). Also, if your problem seems to be related to a protocol instance, you can refer to the Cybectec documentation on the particular protocol. To access the document, proceed as follows:

Click Start, on the Windows taskbar. Point to All Programs, then Cybectec, then SMP Tools, and then Documentation. In the Documentation menu, click Protocols.
The list of available documents is displayed in an explorer window.

Click the document you want to read. In the File menu of the explorer window, click Open with Acrobat.
Your Adobe Acrobat program starts up and displays the document in a window.
205
Creating an SMP gateway report file

In the next section, we will take you through the steps required to solve your problems. If after going through all the required procedures, you find that you need to contact Cybectec, you will need to create a report file. This file will help the technical support group in identifying and solving the problem. SMP gateway report files are stored in the SMP Manager Reports folder. Each time a report is generated, SMP Manager creates an event log file, indicating all operations performed during the report generation. The event log file is also stored in the Reports folder. To create an SMP gateway report file:

Click the SMP gateway in the SMP Manager window. In the Gateway menu, click Report.
Note: The Report command will not be available unless the SMP gateway is online. The Gateway Report dialog box appears.
Click the Tell me more button to display:

the information that will be collected from the SMP gateway; where the SMP gateway report file (*.GRF) will be stored.
Enter additional information in the text box, such as the problem description, or the reason why you are requesting technical support. Assign a name to the report, in the Report Name box. SMP Manager will automatically append the date and time to the report name. Put a checkmark in the Extract Automatically checkbox, if you want to see where the report is located as soon as SMP Manager has finished retrieving the report information. The information will be displayed in a Windows Explorer window. Click the OK button to start the report generation.
206
The Gateway Report progress dialog box appears, showing each operation performed and when the report generation is complete, the dialog box indicates the completion status of the operation. Click the dialog boxs Details button to display the event log for the report generation. Click the Close button to close the dialog box.
If you had put a checkmark in the Extract Automatically checkbox, a Windows Explorer window appears, showing where the report file is located. You will see a .log file, a .grf file, and a folder bearing the same name as the .grf file. If you click the folder, you will see a group of files and folders with information about the data points, crashes, logs, and so on.
Send the .grf file to Cybectec with your request for technical support. The .grf file is, in fact, a zipped file, which when unzipped, contains the files and folders discussed previously.
Viewing an SMP gateway report file

At the time you generate a report, you can choose to see the report immediately. However, at all times, you can view an existing report for any SMP gateway, as follows:

Click the SMP gateway in the SMP Manager window. In the Gateway menu, click Extract Report. In the Windows Open dialog box, choose the desired .grf file.
A Windows Explorer window opens.
Click the folder that has the same name as the .grf file on which you clicked, and click Open.
You will now see a group of files and folders.
Click the items of interest and click Open to view the information.
Startup problems
When you start the SMP or reset it through SMP Manager, it goes through a sequence of steps, after which you should see Started in the Status column of the SMP Manager application window. However, if the SMP software detects a problem during startup, you may see something else in the Status column. Here are some suggestions for troubleshooting the problem. If the problem persists, do not hesitate to contact our technical support group.
No configuration file
If the status is No configuration file, you have not loaded a configuration file on the SMP. Proceed as follows to correct the problem:

Create a configuration file using SMP Config, if you have not already done so. Use SMP Manager to send the file to the SMP. 207
Restart the SMP via SMP Manager, in order to activate the configuration.
Protocols failed
If the status is Protocols failed, it may be due to one of the following reasons:

You changed your software license and did not update your SMP gateway application. There is a problem with a master or slave protocol instance. There is an incompatibility in the settings.
Proceed as follows to correct the problem:
If you have changed your software license without updating your SMP gateway application, update the SMP gateway software using SMP Manager, as some components may be missing. See Updating the SMP gateway application, page 193. Otherwise, start SMP Log and examine the startup log.

Make sure you are using the correct configuration file. Make sure you have described your hardware correctly. For example, you may have specified the wrong SMP model. Check the software versions. You may be using the wrong protocol version. Check the protocol settings. The log will show you the startup of each protocol instance. You will see which one failed to be loaded or did not start up properly. Check its parameter settings. Make sure you have associated the protocol instance with an existing serial port. The number of available ports depends on the hardware configuration settings.
If you are using the wrong configuration file, use SMP Manager to send the correct file to the SMP gateway. If you are using the correct configuration file, fix any errors using SMP Config, and then send the file to the SMP using SMP Manager. If you are using the wrong protocol version, send an updated version of the SMP gateway application to the SMP, using SMP Manager. If you are using the wrong protocol version and you have already sent an updated version of the SMP gateway application to the SMP, you probably need to have SMP Config convert your configuration file, after which you can send the file to the SMP. If you have changed your license, update the SMP gateway software using SMP Manager, as some components may be missing. See Updating the SMP gateway application, page 193. If the problem persists after the SMP has restarted, try using a reduced version of the configuration file, in an attempt to isolate the problem. For example, use a configuration file that has only one device and one protocol instance.
208
Critical component missing

If the status is Critical components missing, there is a missing component in the SMP gateway application. This situation can arise if you change your license without updating the SMP gateway application.
Update the SMP gateway application using SMP Manager. See Updating the SMP gateway application, page 193. If the problem persists, contact Cybectec.
Safe mode
Communication problems
Communication problems always occur in one of the following layers:
SMP DEVICE
Protocol
Protocol
Link
Link
Physical
Physical
SMP Trace and SMP Stats are the ideal tools for you to troubleshoot a communications problem and determine in which layer the problem occurred. SMP Trace shows you the information that was sent back and forth between the SMP and the device, while SMP Stats supplies you with statistics that can help you detect an anomaly. For example, the statistics may show you that there were no exchanges whatsoever on a particular link, or the trace may show you that the SMP never got responses when it polled a particular device.
Physical layer
The physical connection between the SMP and a device is often at the root of a problem. You should therefore ask yourself the following questions:
Am I using the correct type of cable? Do I need to use a cable for RS-232 or for RS-485 communication? Should I be using a 2-wire or a 4-wire cable for RS-485 communication?
209
Is the device connected properly? Make sure the cable is connected to the correct port. Do I need an adaptor? For example, do I need a null-modem adapter for RS-232 communication? Are the TCP/IP network settings configured correctly? Use SMP Config to check the Asynchronous Serial Ports settings, under Connections:
If Im using RS-485 4-wire, did I choose RS-422? If Im using RS-485 2-wire, did I choose RS-485?
Link layer
Problems in the link layer are often related to the settings of the communications component. Here are examples of settings that can cause problems:

Verify the baud rate of both the SMP and the device. Verify the parity, start and stop bit settings. Verify the TCP/IP address and port configuration.
We suggest you take the following steps:

Examine the link layer byte exchanges, using SMP Trace and SMP Stats. Using SMP Config, look at the Connections settings:
If your SMP communicates with the device over a serial link, check the communication settings of the link used to communicate with the device, such as baud rate and parity. These settings must be configured identically at both ends. If your SMP communicates with the device over a WAN or LAN, make sure you have specified the correct TCP/IP address and port number.
Protocol layer
Protocol problems are directly related to the settings of the protocol instance used to communicate with the device. You should proceed as follows:

Verify the configured device address. Verify the protocol version. Verify the packet size. Make sure all scanning sequences are configured. Does the device support the scanning parameters? Different versions of the same device sometimes react differently.
We suggest you take the following steps:
Examine the protocol layer byte exchanges, using SMP Trace and SMP Stats.
210
Using SMP Config, make sure you have specified the correct protocol. Look at the SMP Config general settings:

Check the settings of the protocol instance, such as packet size. Make sure the device or link address is correct. Check the polling parameters. Some devices are not able to respond to rapid polling requests because they process the information very slowly. Other devices only allow slow communication links - 9600 baud or less. If you poll too quickly, the request will arrive before the last block of data is read, thereby causing communication problems.
Problems with data validity

When all the exchanges are taking place correctly and there are no protocol errors reported in the statistics, but some of the acquired values are erroneous or incoherent:
Using SMP Config, examine the following settings for the points that are invalid:
Data point address. Is the address of the physical data point correct? Some devices have flexible configuration options, so you have to compare the SMP Config values with the values set by the device manufacturers software. Conversion factors. Are the scale and offset factors correct for physical analog data point? Polarity. Is the polarity of the physical binary input point set correctly? Warning messages. Are there any warning messages in the message pane, regarding the data points that have erroneous values?
Problems executing a control operation

When a control operation fails:
Use SMP Log to look in the control log, at all the exchanges involved. All control operations are recorded in this log. Use SMP Trace to see the exchanges. Note, however, that you have to be connected to the SMP to view a control operation in real time. Make the following checks to determine the cause of the failure:
Using SMP Log, look at the control log and make sure the SCADA is sending the correct sequence (direct operate, select before operate) of messages.
211
Using SMP Config, check the general settings of both the master and the slave protocol instances. Make sure each of them has a checkmark in Control Enabled. Using SMP Config, make sure the binary and analog physical output points are set up correctly. For example, for the DNP protocol, Control Type requires a value other than Not supported. See the device manufacturers documentation for the required setup and refer to the appropriate Cybectec protocol documentation. Refer to the device manufacturers documentation to check whether the device allows for a polling message to be sent between a select and an operate or whether polling has to wait until after the select and operate have completed. Some manufacturers deselect the device if a polling message is sent between a select and an operate. If polling has to wait, use SMP Config to make sure the master protocol has a checkmark for Tx During SBO in its general parameters. Using the web browser, make sure the point called _smp___localControl is set either to 0 to enable commands from the SCADA or to 1, to enable commands from Visual Substation. If the value is not set properly, send either an open command to the point called _smp___setLocalControl to set the value to 0, or a close command to set the value to 1. Using the web browser, check whether the point is set to inhibit operations. If so, remove the inhibition.
212

SMP Gateway User Manual

Încărcat de

Informații document

Descriere originală:

Drepturi de autor

Formate disponibile

Partajați acest document

Partajați sau inserați document

Opțiuni de partajare

Vi se pare util acest document?

Este necorespunzător acest conținut?

Drepturi de autor:

Formate disponibile

SMP Gateway User Manual

Încărcat de

Drepturi de autor:

Formate disponibile

User Manual

Cooper Power Systems

The SMP Tools SMP Manager

Changing the position of a column......................................................................25

Configuring the SMP

Viewing the SMP log files